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(54) Method for controlled access to a secured system 



(57) In order to gain access to a secured system, a 
user must be able to enter valid user identification infor- 
mation and must also have a remote wireless communi- 
cation device such as a pager or cellular telephone 
having a number that is substantially unique to that 
user. When the user requests access to the secured 
system, the system places a call to the user's remote 
wireless communication device and sends that device 
revalidation information such as a random number gen- 
erated by the secured system. The user must return the 
revalidation information to the secured system to gain 
access. In an alternative embodiment, another person 
(a user-approver) has the remote wireless communica- 
tion device and must return the revalidation information 
to the secured system if the user-approver approves the 
user's request for access. 
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Description 

Background of the invention 

This invention relates to security for controlled s 
access systems (which can, if desired, be systems that 
are accessible from remote locations). Examples of sys- 
tems that can make use of this invention are computer 
systems, transaction processing systems, voice mail 
and voice response systems, and the like. The security 10 
aspect of the invention relates to ensuring that a person 
who is attempting to gain access to the secured system 
is authorized to do so. 

Many types of controlled access systems are 
known. Most such systems employ some form of secu- 15 
rity to reduce the risk of an unauthorized person gaining 
access to and making use of the system. For example, 
a system may require someone who is attempting to 
use the system to first enter some form of user-identifi- 
cation ("user-id"), personal identification number ("pin"), bo 
an/or password. Such intangible security information 
can sometimes be misappropriated, for example, by the 
misappropriator observing the authorized user's entry 
of the security information. Other situations may warrant 
a higher level of security than can be provided by just 25 
intangible security information of the type described 
above. For example, an administrative or super user of 
a computer system or a voice mail or voice response 
system may require a higher level of security. Similarly, 
higher level or administrative access to a secured build- 30 
ing, a prison, an airport, a military installation, or other 
high security location may require a higher level of secu- 
rity. 

It is therefore an object of this invention to provide 
improved security for controlled access Systems. 35 

It is a more particular object of this invention to pro- 
vide security for controlled access systems which 
requires more than mere possession of intangible infor- 
mation in order for a person to gain access to the sys- 
tem. 40 

Summary of the invention 

These and other objects of the invention are 
accomplished in accordance with the principles of the 45 
invention by providing security for controlled access 
systems which requires a person (i.e., a "user") attempt- 
ing to gain access to the system to have a particular 
wireless remote communication device such as a pager 
and to enter into the system information the system so 
requests the user to enter via the wireless remote com- 
munication device. For example, the user may establish 
a modem connection from a personal computer to the 
secured system. The user may than enter user-identify- 
ing information to the secured system via the modem 55 
. connection. If the secured system recognizes the user- 
identifying information as valid, the system causes 
revalidating information to be sent to the user via 



another separate communication channel. In an espe- 
cially preferred embodiment the revalidating information 
is sent to a particular pager which the user must have in 
order to receive that information. The system then gives 
the user an opportunity to send the revalidating informa- 
tion back to the system (e.g., via the modem connec- 
tion). The system allows the user the requested access 
to the system only if the user is able to send back the 
revalidating information. If the user has the particular 
wireless remote communication device required to 
receive the revalidating information, the user is able to 
receive and send back that information and thereby gain 
access to the secured system. If the user does not have 
the required wireless remote communication device, the 
user cannot receive and resend the revalidating infor- 
mation, and the user therefore cannot gain access to 
the secured system. 

In another aspect of the invention the wireless 
remote communication device is intended to be in the 
possession of a person other than the user. This other 
person (a "user-approver") receives the revalidating 
information from the secured system and retransmits 
that information to the system if the user access request 
appears to be in order. In this case, to facilitate decision- 
making by the user-approver, the system may addition- 
ally send to the user-approver information about the 
user (e.g., an identification of the user and information 
about the location from which the user is attempting to 
gain access to the system). 

Further features of the invention, its nature and var- 
ious advantages will be more apparent from the accom- 
panying drawings and the following detailed description 
of the preferred embodiments. 

Brief Description of the Drawing s 

FIG. 1 is a simplified block diagram of illustrative 
apparatus which can be operated in accordance with 
this invention. 

FIGS. 2a-c (collectively referred to as FIG. 2) are a 
flow chart of steps for carrying out an illustrative embod- 
iment of the methods of this invention. 

FIG. 3 is a view similar to FIG. 1 showing alternative 
illustrative apparatus which can be operated in accord- 
ance with this invention. 

FIG. 4 is another view similar to FIGS. 1 and 3 
showing further alternative illustrative apparatus which 
can be operated in accordance with this invention. 

FIGS. 5a-c (collectively referred to as FIG. 5) are a 
flow chart of steps for carrying out another illustrative 
embodiment of the methods of this invention. 

Detailed Description of the Preferred Embodiments 

In, the illustrative embodiment shown in FIG. 1 a 
user 10 requests access to secured system 30 via com- 
munication link 20. For example, secured system 30 
may be a computer system or network, and the user 
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may have a personal computer (included within box 10) 
from which the user may wish to access system 30. 
Communication link 20 may be a modem connection 
which the user establishes through the commercial tele- 
phone network when the user wishes to use system 30. 
It will be understood that these examples are only illus- 
trative, and that many other types of user equipment 10, 
secured systems 30, and communication links 20 are 
possible. 

When the user first establishes communication link 
20, the user is typically required by system 30 to enter 
information which identifies the user. For example, the 
user may be required to enter user id, pin, and/or pass- 
word information. For convenience herein, all such infor- 
mation is referred to as "user identification information." 
System 30 checks the validity of the user identification 
information, and if that information is valid, system 30 
continues on as described below with the process of 
making sure that the user is in fact entitled to access to 
the system. On the other hand, if system 30 finds that 
the user identification information supplied by the user 
is not valid (e.g., it does not correspond to any informa- 
tion in a list of valid user identifications stored in system 
30), then system 30 may either terminate connection 20 
or prompt the user to try again, and if after a predeter- 
mined number of attempts the user is still not able to 
enter valid user identification information, then system 
30 may terminate connection 20. 

If system 30 finds that the user identification infor- 
mation entered by user 10 is valid (and assuming that 
the user and/or type of access requested by the user 
requires further user validation), system 30 identifies a 
particular wireless remote communication device 70 
that this particular user must have. For example, the 
user may be required to have a pager with a particular 
pager number or a cellular telephone with a particular 
telephone number. For convenience herein, any such 
wireless remote communication device 70 that user 10 
is required to have will be said to have a "wireless 
remote communication device number" or "activation 
number" via which device 70 can be substantially 
uniquely activated. Thus system 30 identifies the wire- 
less remote communication device number of the 
device 70 that user 10 must have in order to gain access 
to system 30. Preferably, each user 10 is associated 
with a device 70 having a unique or substantially unique 
wireless remote communication device number. 

When system 30 has identified the number of the 
device 70 that user 10 must have, system 30 sends a 
message (via communication link 40) to the wireless 
communication system 50 that can communicate with 
device 70. This message from system 30 instructs sys- 
tem 50 to call device 70 (via wireless communication 
link 60) and to send it a message that user 10 must 
send back to system 30 in order to gain access to sys- 
tem 30. For example, system 30 may generate a ran- 
dom or substantially random number (e.g., a 
substantially random telephone number) for system 50 



to send to device 70 via communication link 60. Device 
70 may receive this message and display it for user 10 
as indicated by link 80. Alternatively, link 80 may be an 
audio link. When user 10 receives this message, the 

5 user sends it back to system 30, for example, via com- 
munication link 20. Alternatively, user 10 may send this 
message back to system 30 in another way (e.g., via 
elements 70, 60, 50, and 40, if those elements are such 
as to permit bi-directional communication). When sys- 

10 tern 30 receives back from user 1 0 the revalidating mes- 
sage it has sent, system 30 opens system access to the 
user. 

If desired, any or all of communication links 20, 40, 
and 60 can be protected by conventional security meth- 

15 ods such as message encryption or password 
exchange to ensure that messages are authentic and to 
lessen the risk of interception by a third party. 

FIG. 2 shows an illustrative sequence of steps in 
accordance with this invention for operating the appara- 

20 tus of FIG. 1 as described above. To some extent these 
steps have already been mentioned, and so the discus- 
sion of them here can be somewhat abbreviated. 

In step 110 user 10 requests access to secured 
system 30 via communication link 20. As mentioned 

25 above, this generally includes the user supplying some 
user identification information to system 30. 

In step 112 system 30 determines whether the user 
identification information supplied by user 10 is valid 
information for an authorized user. To do this, system 30 

30 may compare the user identification information sup- 
plied by the user to a list of such information for all 
authorized users. The steps shown in FIG. 2 assume 
that the user passes this test, but if not, system 30 may 
perform additional steps (suggested above) to prompt 

35 the user to try again or to disconnect the user (either 
immediately or after a predetermined number of unsuc- 
cessful re- tries by the user). 

Also in step 112 (and assuming that the user has 
supplied valid user identification information), system 

40 30 determines whether this user and/or this user's 
access request necessitate revalidation. In other words, 
some users may only be entitled to a relatively low level 
of access to system 30, which can be granted without 
further security precautions. Or in some cases a user 

45 who might otherwise require more security precautions 
may request only a low level of access, and so in this 
case no further security precautions are needed. For 
the most part, however, the steps shown in FIG. 2 
assume that the user and/or the user's access request 

so warrant further security precautions before system 30 
grants the requested access. Thus it is assumed that 
steps 1 14 et seq. should be performed. 

In step 114 system 30 identifies the "activation 
number" of the wireless remote communication device 

55 70 that user 1 0 should have in order to gain access to 
system 30. If device 70 is a pager, this is the number 
which must be called to reach that pager. If device 70 is 
a cellular telephone, this is the number of that tele- 
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phone. 

In step 116 system 30 generates revalidation infor- 
mation which is to be sent to user 10 via elements 40, 
50, 60, and 70. For example, this revalidation informa- 
tion may be a random or substantially random number 
(e.g., a random or substantially random telephone 
number). 

In step 1 18 system 30 commands wireless commu- 
nication system 50 to call the user's device 70 and to 
transmit the revalidation information to that device. 

In step 1 20 the user's device 70 receives the revali- 
dation information from system 30 via system 50, and in 
step 122 device 70 supplies the received revalidation 
information to the user. 

In step 1 24 system 30 prompts the user to enter the 
revalidation information received from device 70. Such a 
prompt may not be necessary in some cases, and so 
this step can be optional. 

In step 126 the user enters into system 30 the 
revalidation information that the user has received from 
device 70. Depending on the structure of the overall 
system, this entry of information by the user may be 
either via communication link 20 or via a return channel 
through elements 70, 60, 50, and 40. For example, if 
device 70 is a pager with no answer-back capabilities, 
step 126 may be carried out via communication link 20. 
On the other hand, if device 70 is a pager with answer- 
back capabilities or a cellular telephone, step 126 may 
be carried out via elements 70, 60, 50, and 40. 

In step 128 system 30 compares the revalidation 
information it sent out in steps 1 1 6 and 1 1 8 to the revali- 
dation information returned to it in step 1 26. If there is a 
match, then in step 130 control passes to step 134 in 
which system 30 allows access to the user. On the other 
hand, if there is no match of the revalidation information, 
then in step 130 control passes to step 132 where sys- 
tem 30 denies access to the user (e.g., by disconnect- 
ing the user after sending the user an appropriate 
message). 

The process ends in step 136. 

The order of some of the steps in FIG. 2 is not criti- 
cal. For example, step 124 (in which system 30 prompts 
the user to enter the revalidation information) can occur 
earlier in the process (e.g., between steps 116 and 
118). Such earlier occurrence may be desirable to 
remind the user to be ready to receive the revalidation 
information via device 70. For example, the user may 
have to turn on device 70 in order to render it operable, 
and an early prompt step 124 may be helpful in that 
regard. 

FIG. 3 shows an alternative form of the apparatus 
shown in FIG. 1. FIG. 3 is similar to FIG. 1 except that 
FIG. 3 expressly shows that elements 40', 50', 60', 70', 
and 80' permit two-way communication from system 30 
to user 10 and back to system 30. Thus FIG. 3 expressly 
shows the type of overall system in which the revalida- 
tion information sent out by system 30 via elements 40', 
50', 60', 70', and 80' can be sent back to system 30 by 



the user via the reverse path through that same commu- 
nication channel. The method of FIG. 2 is equally appli- 
cable to systems of the type shown in FIGS. 1 and 3. 
FIG. 4 shows another alternative form of the appa- 

s ratus shown in FIGS. 1 and 3. In FIG. 4 the wireless 
communication device 70' associated with user 10 is not 
in the possession of the user. Instead, another person 
(user- approver 90) has device 70'. When user 10 
requests access to system 30, that system initiates a 

10 wireless transmission as before, although in this case 
the wireless transmission may include information iden- 
tifying user 10 in addition to some revalidation informa- 
tion. For example, the user identification information 
may include the telephone number from which user 10 

is is attempting to access system 30, as well as the user's 
name or identification number. This user identification 
information may help user-approver 90 decide whether 
to approve the user's request for access. If user- 
approver 90 decides to approve, the user- approver 

20 returns the revalidation information to system 30 via the 
reverse communication channel through elements 70', 
60', 50', and 40'. System 30 allows user 10 access when 
the revalidation information is thus returned to it. 

FIG. 5 shows adaptation of the method of FIG. 2 to 

25 a system of the type shown in FIG. 4. Many of the steps 
in FIG. 5 are the same as or similar to steps in FIG. 2, 
and this correspondence is indicated by use of the 
same last two reference number digits for the same or 
similar steps in FIGS. 2 and 5. Thus the discussion of 

30 many of the steps in FIG. 5 can be somewhat abbrevi- 
ated because more extensive discussion has already 
been provided for corresponding steps in FIG. 2. 

In step 210 (similar to step 110 in FIG. 2) user 10 
requests access to system 30 via communication chan- 

35 nel 20. 

In step 21 2 (similar to step 1 1 2 in FIG. 2) system 30 
validates user identification information provided by 
user 10 and recognizes the need for revalidation of this 
user request for access. 

40 In step 21 4 (simitar to step 1 1 4 in FIG. 2) system 30 
identifies the activation number of the device 70' associ- 
ated with the user-approver 90 who must approve the 
user's request for access. 

In step 216 (similar to step 1 16 in FIG. 2) system 30 

45 generates user identification and revalidation informa- 
tion for transmission to device 70'. As mentioned above, 
this user identification information may include a name 
or code number for user 10, the telephone number from 
which the user is requesting access, etc. The revalida- 

50 tion information may be the same kind of revalidation 
information that is described above in connection with 
other embodiments of the invention. 

in step 218 (similar to step 1 18 in FIG. 2) system 30 
commands system 50' to call device 70' and to send it 

55 the information generated in step 216. 

In step 220 (similar to step 120 in FIG. 2) device 70' 
receives the above-described information, and in step 
222 (similar to step 122) device 70' supplies that infor- 
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mation to user-approver 90. 

In step 226 (similar to step 126 in FIG. 2) user- 
approver 90 sends the revalidation information back to 
system 30 if the user-approver approves the user's 
request for access. 

Remaining steps 228, 230, 232, 234, and 236 are 
respectively similar to steps 128, 130, 132, 134, and 
136 in FIG. 2 and therefore do not need to be described 
again. 

It will be understood that the foregoing is only illus- 
trative of the principles of the invention and that various 
modifications can be made by those skilled in the art 
without departing from the scope and spirit of the inven- 
tion. For example, the invention can be used with many 
different types of user 10 terminal devices, many differ- 
ent types of secured systems 30, many different types 
of remote wireless communication devices 70, and con- 
sequently many different types of remote wireless com- 
munication systems 50. To reiterate, some specific 
examples of possible uses of the invention include con- 
trolling access to computer systems, transaction 
processing systems, voice mail or voice response sys- 
tems, and secured facilities such as buildings, prisons, 
military installations, and other high security locations. 
The invention may be employed only for certain users 
such as administrators or other super users. 

Claims 

1. A method for ensuring that a user requesting 
access to a secured system should be granted 
such access, said user having substantially unique 
user identifying information and a wireless commu- 
nication device with a substantially unique activa- 
tion number if the user is entitled to access to the 
secured system, said method comprising the steps 
of: 

entering said user identifying information into 
said secured system, said entering step being 
performed by said user; 

CHARACTERIZED BY 
identifying the activation number of the wire- 
less communication device which the user 
identified by said user identifying information 
should have, said identifying step being per- 
formed by said secured system; 
transmitting revalidation information to the 
wireless communication device which the user 
identified by said user identifying information 
should have, said transmitting step being at 
least initiated by said secured system; 
returning said revalidation information to said 
secured system, said returning step being per- 
formed by said user if said user has the wire- 
less communication device which said user 
should have; and 

detecting whether the revalidation information 



returned in said returning step matches the 
revalidation information transmitted in said 
transmitting step, and if so, allowing said user 
access to said secured system, said detecting 
5 step being performed by said secured system. 

2. The method defined in claim 1 wherein said wire- 
less communication device is a pager having a 
pager number as said activation number, and 

10 wherein said identifying step comprises the step of: 

identifying the pager number of the pager that 
the user identified by said user identifying infor- 
mation should have. 

15 

3. The method defined in claim 2 wherein said trans- 
mitting step comprises the steps of: 

placing a call to the pager having said pager 
20 number; and 

transmitting said revalidation information to 
said pager. 

4. The method defined in claim 1 wherein said wire- 
25 less communication device is a cellular telephone 

having a telephone number as said activation 
number, and wherein said identifying step com- 
prises the step of: 

30 identifying the telephone number of the cellular 

telephone that the user identified by said user 
identifying information should have. 

5. The method defined in claim 4 wherein said trans- 
35 mitting step comprises the steps of: 

placing a call to the cellular telephone having 
said telephone number; and 
transmitting said revalidation information to 
40 said cellular telephone. 

6. The method defined in claim 1 wherein said trans- 
mitting step comprises the step of: 

45 generating substantially different revalidation 

information substantially each time said trans- 
mitting step is performed. 

7. The method defined in claim 6 wherein said revali- 
so dation information is a substantially random 

number. 

8. The method defined in claim 6 wherein said revali- 
dation information has the general form of a con- 

55 ventionat telephone number. 

9. The method defined in claim 1 wherein said enter- 
ing step is performed via a first communication 
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channel between said user and said secured sys- 
tem which is different from a second communica- 
tion channel used for transmitting said revalidation 
information to said wireless communication device; 
and wherein said returning step is performed using 5 
one of said first and second communication chan- 
nels. 

1 0. The method defined in claim 9 wherein said return- 
ing step is performed using said first communica- 10 
tion channel. 

11. The method defined in claim 9 wherein said return- 
ing step is performed using said second communi- 
cation channel. 15 

12. The method defined in claim 1 further comprising 
the step of: 

disconnecting said user from said secured sys- 20 
tern if said revalidation information returned 
does not match said revalidation information 
transmitted. 

25 
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FIG. 2B 
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(54) Communications with pier to pier protocol server 



(57) A wireless data network which provides com- 
munications with a Pier to Pier Protocol server is dis- 
closed. A home network includes a home mobile switch- 
ing center and a wireless end system, the home mobile 
switching center including a home registration server 
and a home inter-workingtunction, the wireless end sys- 



tem including an end registration agent, the end regis- 
tration agent being coupled to the home registration 
server The wireless data network also includes a PPP 
server, wherein a message is coupleable from the end 
system through the home inter-working function to the 
PPP server. 
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Description 

BACKGROUND OF THE INVENTION 

s [0001] Priority benefit of the October 1 4, 1 997 filing date of provisional application serial number 60/061 ,91 5 is hereby 
claimed. 

Field of the Invention 

10 [0002] The present invention relates to a wireless data network, and more particularly to communicating with a Pier 
to Pier Protocol server in the wireless data network. 

Description Of Related Art 

75 [0003] FIG. 1 depicts three business entities, whose equipment, working together typically provide remote internet 
access to user computers 2 through user modems 4. User computers 2 and modems 4 constitute end systems. 
[0004] The first business entity is the telephone company (telco) that owns and operates the dial-up plain old tele- 
phone system (POTS) or integrated services data network (ISDN) network. The telco provides the media in the form 
of public switched telephone network (PSTN) 6 over which bits (or packets) can flow between users and the other two 

20 business entities. 

[0005] The second business entity is the internet service provider (ISP). The ISP deploys and manages one or more 
points of presence (POPs) 8 in its service area to which end users connect for network service. An ISP typically es- 
tablishes a POP in each major local calling area in which the ISP expects to subscribe customers. The POP converts 
message traffic from the PSTN run by the telco into a digital form to be carried over intranet backbone 10 owned by 

25 the ISP or leased from an intranet backbone provider like MCI, Inc. An ISP typically leases fractional or full T1 lines or 
fractional or full T3 lines from the telco for connectivity to the PSTN. The POPs and the ISP's medium data center 14 
are connected together over the intranet backbone through router 12A. The data center houses the ISP's web servers, 
mail servers, accounting and registration servers, enabling the ISP to provide web content, e-mail and web hosting 
services to end users. Future value added services may be added by deploying additional types of servers in the data 

30 center. The ISP also maintains router 12A to connect to public internet backbone 20. In the current model for remote 
access, end users have service relationships with their telco and their ISP and usually get separate bills from both. 
End users access the ISP, and through the ISP, public internet 20, by dialing the nearest POP and running a commu- 
nication protocol known as the Internet Engineering Task Force (IETF) point-to-point protocol (PPP). 
[0006] The third business entity is the private corporation which owns and operates its own private intranet 1 8 through 

35 router 12B for business reasons. Corporate employees may access corporate network 18 (e.g., from home or while 
on the road) by making POTS/ISDN calls to corporate remote access server 16 and running the IETF PPP protocol. 
For corporate access, end users only pay for the cost of connecting to corporate remote access server 16. The ISP is 
not involved. The private corporation maintains router 12B to connect an end user to either corporate intranet 18 or 
public internet 20 or both. 

40 [0007] End users pay the telco for the cost of making phone calls and for the cost of a phone line into their home. 
End users also pay the ISP for accessing the ISP's network and services. The present invention will benefit wireless 
service providers like Sprint PCS, PrimeCo, etc. and benefit internet service providers like AOL, AT&T Worldnet, etc. 
[0008] Today, internet service providers offer internet access services, web content services, e-mail services, content 
hosting services and roaming to end users. Because of low margins and no scope of doing market segmentation based 

45 on features and price, ISPs are looking for value added services to improve margins. In the short term, equipment 
vendors will be able to offer solutions to ISPs to enable them to offer faster access, virtual private networking (which 
is the ability to use public networks securely as private networks and to connect to intranets), roaming consortiums, 
push technologies and quality of service. In the longer term, voice over internet and mobility will also be offered. ISPs 
will use these value added services to escape from the low margin straitjacket. Many of these value added services 

50 fall in the category of network services and can be offered only through the network infrastructure equipment. Others 
fall in the category of application services which require support from the network infrastructure, while others do not 
require any support from the network infrastructure. Services like faster access, virtual private networking, roaming, 
mobility, voice, quality of service, quality of service based accounting all need enhanced network infrastructure. The 
invention described here will be either directly provide these enhanced services or provide hooks so that these services 

55 can be added later as future enhancements. Wireless service providers will be able to capture a larger share of the 
revenue stream. The ISP will be able to offer more services and with better market segmentation. 
[0009] According to one aspect of this invention a wireless data network comprises: a home network that includes 
a home mobile switching center and a wireless end system, the home mobile switching center including a home reg- 
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istration server and a home inter-working function, the wireless end system including an end registration agent, the 
end registration agent being coupled to the home registration server; and a PPP server, a message being coupleable 
from the end system through the home inter-working function to the PPP server. 

[0010] There may be provided a foreign network that includes a foreign base station with a foreign access hub, the 

s foreign access hub including a first serving inter-working function; and a second mobile end system subscribed to the 
home network and operating within the foreign network, a first message being transportable between the first mobile 
end system and a first communications server through the first home inter-working function and through the first serving 
inter-working function of the foreign access hub in the foreign base station. The first message may be transportable 
from the second mobile end system through the first home inter-working function to the first communications server. 

10 The second mobile end system may include a wireless modem coupleable to the foreign access hub. 

[0011] There may be provided a third end system subscribed to the home network and operating as a fixed end 
system within the home network; and a home base station that includes a home access hub with a second home inter- 
working function, a second message being transportable between the third end system and a second communications 
server through the second home inter-working function. 

*5 [0012] There may be provided a third end system subscribed to the home network and operating as a mobile end 
system within the home network; a home mobile switching center having a second home inter-working function, and 
a home base station that includes a home access hub with a second serving inter-working function, a second message 
being transportable between the second end system and a second communications server through the second serving 
inter-working function and through the second home inter-working function. 

20 [001 3] The first home inter-working function may include a home accounting collection module to collect accounting 
data on message traffic transported through the first home inter-working function. The home mobile switching center 
may include a home accounting server; and the home accounting collection module may include a sub-module to 
periodically send accounting reports to a home accounting server. The home network may further include a home 
billing processor; and the home accounting server may include a module to send accounting reports to the home billing 

25 processor, the home billing processor including a module to prepare customer bills based on the accounting reports 
from the home accounting server. The home network may further include a home billing processor; the foreign network 
may further include a foreign accounting server and a foreign billing processor; the first serving inter-working function 
may include a foreign accounting collection module to collect accounting data on message traffic transported through 
the first serving inter-working function, the foreign account collection module including a sub-module to periodically 

30 send accounting reports to the foreign accounting server, the foreign accounting server including a module to send 
accounting reports to the foreign billing processor, the foreign billing processor, including a module to send accounting 
reports to the home billing processor, the home billing processor including a module to prepare customer bills based 
on the accounting reports from the foreign billing processor. 

[0014] There may be provided a foreign network that includes a base station with an access hub and a foreign mobile 
35 switching center with a serving registration server, the access hub including a serving inter-working function, the serving 
inter-working function including a foreign accounting collection module; the home inter-working junction including a 
home accounting collection module; and a second end system subscribed to the wireless data network and coupleable 
to the foreign access hub, the home and serving accounting collection modules collecting accounting data on message 
traffic transported between the second end system and a communications server through the home inter-working func- 
40 tion and through the serving inter-working function. The home accounting collection module may include a sub-module 
to collect accounting data on message traffic transported from the second end system through the home inter-working 
function to the communications server. 

[0015] The foreign mobile switching center may include a foreign accounting server; and the foreign accounting 
collection module may include a sub-module to periodically send accounting reports to the foreign accounting server. 

45 [0016] The home mobile switching center may include a home accounting server; the home accounting collection 
module may include a sub-module to periodically send accounting reports to the home accounting server. The home 
network may further include a home billing processor; and the home accounting server may include a module to send 
accounting reports to the home billing processor, the home billing processor including a module to prepare customer 
bills based on the accounting reports from the home accounting server. 

50 [001 7] The foreign network may further include a foreign accounting server and a foreign billing processor; the foreign 
accounting collection module may include a sub-modute to collect accounting data on message traffic transported 
through the first serving inter-working function, the foreign accounting collection module further including a sub-module 
to periodically send accounting reports to the foreign accounting server, the foreign accounting server including a 
module to send accounting reports to the foreign billing processor, the foreign billing processor including a module to 

55 send accounting reports to the home billing processor, the home billing processor including a module to prepare cus- 
tomer bills based on the accounting reports from the foreign billing processor. 

[0018] The foreign mobile switching center may include a foreign accounting server; the home mobile switching 
center may include a home accounting server; the foreign accounting collection module may include a sub-module to 
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periodically send accounting reports to a foreign accounting server; and the home accounting collection module may 
include a sub-module to periodically send accounting reports to a home accounting server. 

[0019] There may be provided a foreign network that includes a foreign mobile switching center with a serving reg- 
istration server; the home mobile switching center may include a plurality of unassigned home inter-working functions; 

s and a second end system subscribed to the home network and operating within the foreign network, the second end 
system including an end registration agent to form a registration request, the end registration agent sending the reg- 
istration request through the serving registration server to the home registration server, the home registration server 
including a module to select an active home inter-working function from the plurality of unassigned home inter-working 
functions based on the registration request. The serving inter-working function may be regarded as an active serving 

10 inter-working function; the foreign network may further include a plurality of serving inter-working functions; and the 
serving registration server may include a module to select the active serving inter-working function from the plurality 
of serving inter-working functions based on the registration request. 

[0020] The home registration server may include a module to authenticate that the foreign network is authorized to 
host the second end system. 

15 [0021] The home registration server may include a module to authenticate that the second end system is authorized 
to receive services of the home network. 

[0022] The serving registration server may include a module to authenticate that the second end system is a sub- 
scriber of the home network. 

[0023] The registration request may include service type information; and the home registration server may include 
20 a module to control the selection of the active home inter-working function based on the service type information. The 
service type information may specify a request for one of public internet service and private intranet service. The service 
type information may specify a request for one of mobile service and fixed service. 

[0024] The registration request may include quality of service information; and the home registration server may 
include a module to control the selection of the active home inter-working function based on the quality of service 

25 information. The quality of service information may specify a request for one of constant bit rate service, real time 
variable bit rate service, non-real time variable bit rate service, unspecified bit rate service and available bit rate service. 
[0025] According to another aspect of this invention there is provided a data network to communicate with a first 
PPP protocol module, the data network comprising: a mobile end system operable in first and second modes, the first 
mode providing internet access services, the second mode providing remote intranet access services, the mobile end 

30 system including a second PPP protocol module, PPP data frames being transportable between the first and second 
PPP protocol modules; and a home inter-working function, the home inter-working function incorporating the first PPP 
protocol module when the mobile end system operates in the first mode, the home inter-working function being coupled 
to the first PPP protocol module operating externally when the mobile end system operates in the second mode. 
[0026] The present invention provide end users with remote wireless access to the public internet, private intranets 

35 and internet service providers. Wireless access is provided through base stations in a home network and base stations 
in foreign networks with interchange agreements. 

[0027] It is an object of the present invention to provide a wireless packet switched data network for end users that 
divides mobility management into local, micro, macro and global connection handover categories and minimizes hand- 
off updates according to the handover category. It is another object to integrate MAC handoff messages with network 

40 handoff messages. It is a further object of the present invention to separately direct registration functions to a registration 
server and direct routing functions to inter-working function units. It is yet another object to provide an intermediate 
XTunnel channel between a wireless hub (also called access hub AH) and an inter-working function unit (IWF unit) in 
a foreign network It is yet another object to provide an IXTunnel channel between an inter-working function unit in a 
foreign network and an inter-working function unit in a home network. It is yet another object to enhance the layer two 

45 tunneling protocol (L2TP) to support a mobile end system. It is yet another object to perform network layer registration 
before the start of a PPP communication session. 

[0028] According to one embodiment of the invention, a wireless data network which provides communications with 
a Pier to Pier Protocol server is disclosed. A home network includes a home mobile switching center and a wireless 
end system, the home mobile switching center including a home registration server and a home inter-working function, 
so the wireless end system including an end registration agent, the end registration agent being coupled to the home 
registration server. The wireless data network also includes a PPP server, wherein a message is coupleable from the 
end system through the home inter-working function to the PPP server. 

[0029] According to another embodiment of the invention, a data network to communicate with a first PPP protocol 
module is disclosed. The data network comprises a mobile end system and a home inter-working function. The mobile 
55 end system is operable in first and second modes, the first mode providing internet access services, the second mode 
providing remote intranet access services, the mobile end system including a second PPP protocol module, PPP data 
frames being transportable between the first and second PPP protocol modules. The home inter-working function is 
incorporated in the first PPP protocol module when the mobile end system operates in the first mode, the home inter- 
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working function being coupled to the first PPP protocol module operating externally when the mobile end system 
operates in the second mode. 

Brief Description Of Drawings 

5 

[0030] The invention will be described in detail in the following description of preferred embodiments with reference 
to the following figures wherein: 

FIG. 1 is a configuration diagram of a known remote access architecture through a public switched telephone 
10 network; 

FIG. 2 is a configuration diagram of a remote access architecture through a wireless packet switched data network 
according to the present invention; 

15 FIG. 3 is a configuration diagram of selected parts of the architecture of the network of FIG. 2 showing a roaming 

scenario; 

FIG. 4 is a configuration diagram of a base station with local access points; 

20 FIG. 5 is a configuration diagram of a base station with remote access points; 

FIG. 6 is a configuration diagram of a base station with remote access points, some of which are connected using 
a wireless trunk connection; 

25 FIG. 7 is a diagram of a protocol stack for a local access point; 

FIG. 8 is a diagram of a protocol stack for a remote access point with a wireless trunk; 

FIG. 9 is a diagram of a protocol stack for a relay function in the base station for supporting remote access points 
30 with wireless trunks; 

FIG. 10 is a diagram of protocol stacks for implementing the relay function depicted in FIG. 9; 

FIG. 11 is a diagram of protocol stacks for a relay function in the base station for supporting local access points; 

35 

FIG. 1 2 is a configuration diagram of selected parts of the architecture of the network of FIG. 2 showing a first end 
system registering in the home network from the home network and a second system registering in the home 
network from a foreign network using a home inter-working function for an anchor; 

40 FIG. 1 3 is a configuration diagram of selected parts of the architecture of the network of FIG. 2 showing a first end 

system registering in the home network from the home network and a second system registering in the home 
network from a foreign network using a serving inter-working function for an anchor; 

FIG. 14 is a ladder diagram of the request and response messages to register in a home network from a foreign 
45 network and to establish, authenticate and configure a data link; 

FIG. 15 is a configuration diagram of selected parts of the architecture of the network of FIG. 2 showing registration 
requests and responses for registering a mobile in a home network from the home network; 

* 

so FIG. 16 is a configuration diagram of selected parts of the architecture of the network of FIG . 2 showing registration 

requests and responses for registering a mobile in a home network from a foreign network; 

FIG. 17 is a configuration diagram of protocol stacks showing communications between an end system in a home 
network and an inter-working function in the home network where the cell site has local access points; 

55 

FIG. 18 is a configuration diagram of protocol stacks showing communications between an end system in a home 
network and an inter-working function in the home network where the cell site has remote access points coupled 
to a wireless hub through a wireless trunk; 
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FIG. 19 is a configuration diagram of protocol stacks showing communications between a base station coupled to 
a roaming end system and a home inter-working function; 

F(G. 20 is a configuration diagram of protocol stacks showing communications between an end system in a home 
s network through an inter-working function in the home network to an internet service provider; 

FIG. 21 is a configuration diagram of protocol stacks showing communications between an end system in a foreign 
network and a home registration server in a home network during the registration phase; 

10 FIG. 22 is a processing flow diagram showing the processing of accounting data through to the customer billing 

system; 

FIGS. 23 and 24 are ladder diagrams depicting the registration process for an end system in a home network and 
in a foreign network, respectively; 

15 

FIGS. 25 and 26 are protocol stack diagrams depicting an end system connection in a home network where a PPP 
protocol terminates in an inter-working function of the home network and where the PPP protocol terminates in an 
ISP or intranet, respectively; 

20 FIGS. 27 and 28 are protocol stack diagrams depicting an end system connection in a foreign network where a 

PPP protocol terminates in an inter-working function of the foreign network and where the PPP protocol terminates 
in an ISP or intranet, respectively; 

FIG. 29 illustrates end systems connected via ethernet to a wireless modem where PPP protocol is encapsulated 
25 jn an ethernet frame; 

FIG. 30 illustrates an ethernet frame format; 

FIG. 31 illustrates XWD Header fields ; 

30 

FIG. 32 illustrates end systems connected via a local area network to a wireless router where PPP protocol ter- 
minates at the wireless router; 

FIGS. 33, 34 and 35 are ladder diagrams depicting a local handoff scenario, a micro handoff scenario and a macro 
35 handoff scenario, respectively; 

FIG. 36 is a ladder diagram depicting a global handoff scenario where the foreign registration server changes and 
where home inter-working function does not change; and 

40 FIG. 37 is a ladder diagram depicting a global handoff scenario where both the foreign registration server and the 

home inter-working function change. 

Detailed Description Of Preferred Embodiments 

45 [0031] The present invention provides computer users with remote access to the internet and to private intranets 
using virtual private network services over a high speed, packet switched, wireless data link. These users are able to 
access the public internet, private intranets and their internet service providers over a wireless link. The network sup- 
ports roaming, that is, the ability to access the internet and private intranets using virtual private network services from 
anywhere that the services offered by the present system are available. The network also supports handoffs, that is, 

so the ability to change the point of attachment of the user to the network without disturbing the PPP link between the 
PPP client and the PPP server. The network targets users running horizontal internet and intranet applications. These 
applications include electronic mail, file transfer, browser based WWW access and other business applications built 
around the inter net. Because the network will be based on the IETF standards, it is possible to run streaming media 
protocols like RTP and conferencing protocols like H.323 over it. 

55 [0032] Other internet remote access technologies that are already deployed or are in various stages of deployment 
include: wire line dial-up access based on POTS and ISDN, XDSL access, wireless circuit switched access based on 
GSM/CD MA/TDM A, wireless packet switched access based on GSM/CDMA/TDMA, cable modems, and satellite 
based systems. However, the present system offers a tow cost of deployment, ease of maintenance, a broad feature 
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set, scaleability, an ability to degrade gracefully under heavy load conditions and support for enhanced network services 
like virtual private networking, roaming, mobility and quality of service to the relative benefit of users and service pro- 
viders. 

[0033] For wireless service providers who own personal communications system (PCS) spectrum, the present sys- 
5 tern will enable them to offer wireless packet switched data access services that can compete with services provided 
by the traditional wire line telcos who own and operate the PSTN. Wireless service providers may also decide to become 
internet service providers themselves, in which case, they will own and operate the whole network and provide end to 
end services to users. 

[0034] For internet service providers the present system will allow them to by-pass the telcos (provided they purchase 
10 or lease the spectrum) and offer direct end to end services to users, perhaps saving access charges to the telcos, 
which may increase in the future as the internet grows to become even bigger than it is now. 

[0035] The present systems flexible so that it can benefit wireless service providers who are not internet service 
providers and who just provide ISP, internet or private intranet access to end users. The system can also benefit service 
providers who provide wireless access and internet services to end users. The system can also benefit service providers 
is who provide wireless access and internet services but also allow the wireless portion of the network to be used for 
access to other ISPs or to private intranets. 

[0036] In FIG. 2, end systems 32 (e.g., based on, for example, Win 95 personal computer) connect to wireless 
network 30 using external or internal modems. These modems allow end systems to send and receive medium access 
control (MAC) frames over air link 34. External modems attach to the PC via a wired or wireless link. External modems 

20 are fixed, and, for example, co-located with roof top mounted directional antennae. External modems may be connected 
to the user's PC using any one of following means: 802.3, universal serial bus, parallel port, infra-red, or even an ISM 
radio link. Internal modems are preferably PCMCIA cards for laptops and are plugged into the laptop's backplane. 
Using a small omni-directional antenna, they send and receive MAC frames over the air link. End systems can also 
be laptops with a directional antenna, a fixed wireless station in a home with a directional antenna connected via AC 

25 lines, and other alternatives. 

[0037] Wide-area wireless coverage is provided by base stations 36. The base station 36 can employ a 5-channel 
reuse communication scheme as described in U.S. Patent Application Serial No. 08/998,505, filed on December 26, 
1 997. The range of coverage provided by base stations 36 depends on factors like link budget, capacity and coverage. 
Base stations are typically installed in cell sites by PCS (personal communication services) wireless service providers. 

30 Base stations multiplex end system traffic from their coverage area to the system's mobile switching center (MSC) 40 
over wire line or microwave backhaul network 38. 

[0038] The system is independent of the MAC and PHY (physical) layer of the air link and the type of modem. The 
architecture is also independent of the physical layer and topology of backhaul network 38. The only requirements for 
the backhaul network are that it must be capable of routing internet protocol (IP) packets between base stations and 

35 the MSC with adequate performance. At Mobile Switching Center 40 (MSC 40), packet data inter-working function 
(IWF) 52 terminates the wireless protocols for this network. IP router 42 connects MSC 40 to public internet 44, private 
intranets 46 or to inter net service providers 46. Accounting and directory servers 48 in MSC 40 store accounting data 
and directory information. Element management server 50 manages the equipment which includes the base stations, 
the IWFs and accounting/directory servers. 

40 [0039] The accounting server will collect accounting data on behalf of users and send the data to the service provider's 
billing system. The interface supported by the accounting server will send accounting information in American Man- 
agement Association (AMA) billing record format, or any other suitable billing format, over a TCP/IP (transport control 
protocol/inter net protocol) transport to the billing system (which is not shown in the figure). 

[0040] The network infrastructure provides PPP (point-to-point protocol) service to end systems. The network pro- 
45 vides (1 ) fixed wireless access with roaming (log-in anywhere that the wireless coverage is available) to end systems 
and (2) low speed mobility and hand-offs. When an end system logs on to a network, in it may request either fixed 
service (i.e., stationary and not requiring handoff services) or mobile service (i.e., needing handoff services). An end 
system that does not specify fixed or mobile is regarded as specifying mobile service. The actual registration of the 
end system is the result of a negotiation with a home registration server based on requested level of service, the level 
50 of services subscribed to by the user of the end system and the facilities available in the network. 

[0041] If the end system negotiates a fixed service registration (i.e., not requiring handoff services) and the end 
system is located in the home network, an IWF (inter-working function) is implemented in the base station to relay 
traffic between the end user and a communications server such as a PPP server (i.e., the point with which to be 
connected, for example, an ISP PPP server or a corporate intranet PPP server or a PPP server operated by the wireless 
55 service provider to provide customers with direct access to the public internet). It is anticipated that perhaps 80% of 
the message traffic will be of this category, and thus, this architecture distributes IWF processing into the base stations 
and avoids message traffic congestion in a central mobile switching center. 

[0042] If the end system requests mobile service (from a home network or a foreign network) or if the end system 
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request roaming service (i.e., service from the home network through a foreign network), two IWFs are established: a 
serving I WF typically established in the base station of the network to which the end system is attached (be it the home 
network or a foreign network) and a home IWF typically established in mobile switching center MSC of the home 
network. Since this situation is anticipated to involve only about 20% of the message traffic, the message traffic con- 
s gestion around the mobile switching center is minimized. The serving IWF and the wireless hub may be co-located in 
the same nest of computers or may even be programmed in the same computer so that a tunnel using an XTunnel 
protocol need not be established between the wireless hub and the serving IWF. 

[0043] However, based on available facilities and the type and quality of service requested, a serving IWF in a foreign 
network may alternatively be chosen from facilities in the foreign MSC. Generally, the home IWF becomes an anchor 
10 point that is not changed during the communications session, while the serving IWF may change if the end system 
moves sufficiently. 

[0044] The base station includes an access hub and at least one access point (be it remote or collocated with the 
access hub). Typically, the access hub serves multiple access points. While the end system may be attached to an 
access point by a wire or cable according to the teachings of this invention, in a preferred embodiment the end system 
75 is attached to the access point by a wireless "air link", in which case the access hub is conveniently referred to as a 
wireless hub. While the access hub is referred to as a "wireless hub" throughout the description herein, it will be ap- 
preciated that an end system coupled through an access point to an access hub by wire or cable is an equivalent 
implementation and is contemptated by the term "access hub". 

[0045] In the invention, an end system includes an end user registration agent (e.g., software running on a computer 

20 of the end system, its modem or both) that communicates with an access point, and through the access point to a 
wireless hub. The wireless hub includes a proxy registration agent (e.g., software running on a processor in the wireless 
hub) acting as a proxy for the end user registration agent. Similar concepts used in, for example, the IETF proposed 
Mobile IP standard are commonly referred to as a foreign agent (FA). For this reason, the proxy registration agent of 
the present system will be referred to as a foreign agent, and aspects of the foreign agent of the present system that 

25 differ from the foreign agent of Mobile IP are as described throughout this description. 

[0046] Using the proxy registration agent (i.e., foreign agent FA) in a base station, the user registration agent of an 
end system is able to discover a point of attachment to the network and register with a registration server in the MSC 
(mobile switching center) of the home network. The home registration server determines the availability of each of the 
plural inter-working function modules (IWFs) in the network (actually software modules that run on processors in both 

30 the MSC and the wireless hubs) and assigns IWF(s) to the registered end system. For each registered end system, a 
tunnel (using the xTunne/ protocol) is created between the wireless hub in the base station and an inter-working function 
(IWF) in the mobile switching center (MSC), this tunnel transporting PPP frames between the end system and the IWF 
[0047] As used herein, the XTunnel protocol is a protocol that provides in-sequence transport of PPP data frames 
with flow control. This protocol may run over standard IP networks or over point-to-point networks or over switched 

35 networks like ATM data networks or frame relay data networks. Such networks may be based on T1 or T3 links or 
based on radio links, whether land based or space based. The XTunnel protocol may be built by adapting algorithms 
from L2TP (level 2 transport protocol). In networks based on links where lost data packets may be encountered, a re- 
transmission feature may be a desirable option. 

[0048] The end system's PPP peer (i.e., a communications server) may reside in the IWF or in a corporate intranet 
40 or ISP's network. When the PPP peer resides in the IWF, an end system is provided with direct internet access. When 
the PPP peer resides in an intranet or ISP, an end system is provided with intranet access or access to an ISP In order 
to support intranet or ISP access, the IWF uses the layer two tunneling protocol (L2TP) to connect to the intranet or 
ISP's PPP server. From the point of view of the intranet or ISP's PPP server, the IWF looks like a network access server 
(NAS). PPP traffic between the end system and the IWF is relayed by the foreign agent in the base station. 
45 [0049] In the reverse (up link) direction, PPP frames traveling from the end system to the IWF are sent over the MAC 
and air link to the base station. The base station relays these frames to the IWF in the MSC using the XTunnel protocol. 
The IWF delivers them to a PPP server for processing. For internet access, the PPP server may be in the same machine 
as the IWF. For ISP or intranet access, the PPP server is in a private network and the IWF uses the layer two tunneling 
protocol (L2TP) to connect to it. 
so [0050] In the forward (down link) direction, PPP frames from the PPP server are relayed by the IWF to the base 
station using the XTunnel protocol. The base station de-tunnels down link frames and relays them over the air link to 
the end system, where they are processed by the end system's PPP layer 

[0051] To support mobility, support for hand-offs are included. The MAC layer assists the mobility management soft- 
ware in the base station and the end system to perform hand-offs efficiently. Hand-offs are handled transparently from 
55 the peer PPP entities and the L2TP tunnel. If an end system moves from one base station to another, a new XTunnel 
is created between the new base station and the original IWF. The old XTunne/fromthe old base station will be deleted. 
PPP frames will transparently traverse the new path. 

[0052] The network supports roaming (i.e., when the end user connects to its home wireless service provider through 
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a foreign wireless service provider). Using this feature, end systems are able to roam away from the home network to 
a foreign network and still get service, provided of course that the foreign wireless service provider and the end system's 
home wireless service provider have a service agreement. 

[0053] In FIG. 3, roaming end system 60 has traveled to a location at which foreign wireless service provider 62 
5 provides coverage. However, roaming end system 60 has a subscriber relationship with home wireless service provider 
70. In the present invention, home wireless service provider 70 has a contractual relationship with foreign wireless 
service provider 62 to provide access services. Therefore, roaming end system 60 connects to base station 64 of 
foreign wireless service provider 62 over the air link. Then, data is relayed from roaming end system 60 through base 
station 64, through serving IWF 66 of foreign wireless service provider 62, to home IWF 72 of home wireless service 
10 provider 70, or possibly through home IWF 72 of home wireless service provider 70 to internet service provider 74. 
[0054] An inter-service provider interface, called the I -interface, is used for communications across wireless service 
provider (WSP) boundaries to support roaming. This interface is used for authenticating, registering and for transporting 
the end system's PPP frames between the foreign WSP and the home WSP. 

[0055] PPP frames in the up link and the down link directions travel through the end system's home wireless service 
15 provider (WSP). Alternatively, PPP frames directly transit from the foreign WSP to the destination network. The base 
station in the foreign WSP is the end system's point of attachment in the foreign network. This base station sends (and 
receives) PPP frames to (and from) a serving IWF in the foreign WSP's mobile switching center. The serving IWF 
connects over the l-interface to the home IWF using a layer two tunnel to transport the end systems PPP frames in 
both directions. The serving IWF in the foreign WSP collects accounting data for auditing. The home IWF in the home 
20 WSP collects accounting data for billing. 

[0056] The serving IWF in the foreign WSP may be combined with the base station in the same system, thus elim- 
inating the need for the X-Tunnel. 

[0057] During the registration phase, a registration server in the foreign WSP determines the identity of the roaming 
end system's home network. Using this information, the foreign registration server communicates with the home reg- 

25 istration server to authenticate and register the end system. These registration messages flow over the l-interface. 
Once the end system has been authenticated and registered, a layer two tunnel is created between the base station 
and the serving IWF using the XTUNNEL protocol and another layer two tunnel is created between the serving IWF 
and the home IWF over the l-interface. The home IWF connects to the end system's PPP peer as before, using L2TP 
(level 2 tunnel protocol). During hand-offs, the location of the home IWF and the L2TP tunnel remains fixed. As the 

30 end system moves from one base station to another base station, a new tunnel is created between the new base 
station and the serving IWF and the old tunnel between the old base station and the serving IWF is deleted. If the end 
system moves far enough, so that a new serving IWF is needed, a new tunnel will be created between the new serving 
IWF and the home IWR The old tunnel between the old serving and the home will be deleted. 
[0058] To support roaming, the l-interface supports authentication, registration and data transport services across 

35 wireless service provider boundaries. Authentication and registration services are supported using the IETF Radius 
protocol. Data transport services to transfer PPP frames over a layer two tunnel are supported using the l-XTunnel 
protocol. This protocol is based on the IETF L2TP protocol. 

[0059] As used in this description, the term home IWF refers to the IWF in the end system's home network. The term 
serving IWF refers to the IWF in the foreign network which is temporarily providing service to the end system. Similarly 
40 the term home registration server refers to the registration server in the end system's home network and the term 
foreign registration server refers to the registration server in the foreign network through which the end system registers 
while it is roaming. 

[0060] The network supports both fixed and dynamic IP address assignment for end systems. There are two types 
of IP addresses that need to be considered. The first is the identity of the end system in its home network. This may 

45 be a structured user name in the format user ©domain. This is different from the home IP address used in mobile IP 
The second address is the IP address assigned to the end system via the PPP IPCP address negotiation process. The 
domain sub-field of the home address is used to identify the user's home domain and is a fully qualified domain name. 
The user sub-field of the home address is used to identify the user in the home domain. The User-Name is stored on 
the end system and in the subscriber data-base at the MSC and is assigned to the user when he or she subscribes to 

50 the service. The domain sub-field of the User-Name is used during roaming to identify roaming relationships and the 
home registration server for purposes of registration and authentication. Instead of the structured user name another 
unique identifier may be used to identify the user's home network and the user's identity in the home network. This 
identifier is sent in the registration request by the end system 

[0061] The PPP IPCP is used to negotiate the IP address for the end system. Using IP configuration protocol IPCP, 
55 the end system is able to negotiate a fixed or dynamic IP address. 

[0062] Although the use of the structured user-name field and the non-use of an IP address as the home address is 
a feature that characterizes the present system over a known mobile IP, the network may be enhanced to also support 
end systems that have no user-name and only a non-null home address, if mobile IP and its use in conjunction with 
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PPP end systems becomes popular. The PPP server may be configured by the service provider to assign IP addresses 
during the IPCP address assignment phase that are the same as the end system's home IP address. In this case, the 
home address and the IPCP assigned IP address will be identical. 

[0063] In FIG. 4, base station 64 and air links from end systems form wireless sub-network 80 that includes the air 
5 links for end user access, at least one base station (e.g., station 64) and at least one backhaul network (e.g. ( 38 of 
FIG. 2) from the base station to MSC 40 (FIG. 2). The wireless sub-network architecture of, for example, a 3-sectored 
base station includes the following logical functions. 

1 . Access point function. Access points 82 perform MAC layer bridging and MAC layer association and dissociation 
10 procedures. An access point includes a processor (preferably in the form of custom application specific integrated 

circuit ASIC), a link to a wireless hub (preferably in the form of an Ethernet link on a card or built into the ASIC), 
a link to an antenna (preferably in the form ot a card with a data modulator/demodulator and a transmitter/receiver), 
and the antenna to which the end system is coupled. The processor runs software to perform a data bridging 
function and various other functions in support of registration and mobility handovers as further described herein. 
is See discussion with respect to FIGS. 7, 8 and 11 . 

Access points (APs) take MAC layer frames from the air link and relay them to a wireless hub and vice versa. 
The MAC layer association and disassociation procedures are used by APs to maintain a list of end system MAC 
addresses in their MAC address filter table. An AP will only perform MAC layer bridging on behalf of end systems 
whose MAC addresses are present in the table. An access point and its associated wireless hub are typically co- 
20 located. In its simplest form, an access point is just a port into a wireless hub. When the APs and the wireless hub 

are co-located in the same cell site, they may be connected together via a IEEE 802.3 link. Sometimes, access 
points are located remotely from the wireless hub and connected via a long distance link like a wired T1 trunk or 
even a wireless trunk. For multi-sector cells, multiple access points (i.e., one per sector) are used. 

25 2. Wireless hub function. Wireless hub 84 performs the foreign agent (FA) procedures, backhaul load balancing 

(e.g., over multiple Tl's), backhaul network interfacing, and the xtunnef procedures. When support for quality of 
service (QOS) is present, the wireless hub implements the support for QOS by running the xtunnel protocol over 
backhauls with different QOS attributes. In a multi-sector cell site, a single wireless hub function is typically shared 
by multiple access points. 

30 A wireless hub includes a processor, a link to one or more access points (preferably in the form of an Ethernet 

link on a card or built into an ASIC), and a link to a backhaul line. The backhaul line is typically a T1 or T3 com- 
munications line that terminates in the mobile switching center of the wireless service provider. The link to the 
backhaul line formats data into a preferred format, for example, an Ethernet format, a frame relay format or an 
ATM format. The wireless hub processor runs software to support data bridging and various other functions as 

35 described herein. See discussion with respect to FIGS. 9, 10 and 11 . 

[0064] The base station design supports the following types of cell architectures. 

1. Local AP architecture. In a local AP architecture, access points have a large (> = 2km, typically) range. They 
40 are co-located in the cell site with the wireless hub (FIG. 4). Access points may be connected to the wireless hub 

using an IEEE 802.3 network or may be directly plugged into the wireless hub's backplane or connected to the 
wireless hub using some other mechanism (e.g. universal serial bus, printer port, infra-red, etc.). It will be assumed 
that the first alternative is used for the rest of this discussion. The cell site may be omni or sectored by adding 
multiple access points and sectored antennas to a wireless hub. 

45 

2. Remote AP architecture. In a remote AP architecture, access points usually have a very small range, typically 
around 1 km radius. They are located remotely (either indoors or outdoors) from the wireless hub. AT1 or a wireless 
trunk preferably links remote access points to the cell site where the wireless hub is located. From the cell site, a 
wire line backhaul or a microwave link is typically used to connect to the IWF in the MSC. If wireless trunking 

50 between the remote AP and the wireless hub is used, omni or sectored wireless radios for trunking are utilized. 

The devices for trunking to remote access points are preferably co-located with the wireless hub and may be 
connected to it using an IEEE 802.3 network or may be directly plugged into the wireless hub's backplane. These 
devices will be referred to by the term trunk AP 

55 3. Mixed AP architecture. In a mixed architecture, the wireless sub-network will have to support remote and local 

access points. Remote access points may be added for hole filling and other capacity reasons. As described earlier, 
T1 or wireless trunks may be used to connect the remote AP to the wireless hub. 
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[0065] FIG. 5 shows a cell with three sectors using local APs only. The access points and the wireless hub are co- 
located in the base station and are connected to each other with 802.3 links. 

[0066] FIG. 6 shows an architecture with remote access points 82 connected to wireless hub 84 using wireless trunks 
86. Each trunk access point in the base station provides a point to multi-point wireless radio link to the remote micro 
5 access points (R-AP in figure). The remote access points provide air link service to end systems. The wireless hub 
and the trunk access points are co-located in the base station and connected together via 802.3 links. This figure also 
shows remote access points 82R connected to the wireless hub via point to point T1 links. In this scenario, no trunk 
APs are required. 

[0067] To support all of the above cell architectures and the different types of access points that each cell might use, 
10 the network architecture follows the following rules: 

1 . Access points function as MAC layer bridges. Remote access points perform MAC bridging between the air link 
to the end systems and the wireless or T1 trunk to the cell site. Local access points perform MAC bridging between 
the air link to the end systems and the wireless hub. 

15 

2. Trunk access points also function as MAC layer^ bridges. They perform MAC bridging between the trunk (which 
goes to the access points) and the wireless hub. 

3. The wireless hub is connected to all co-located MAC bridges (i.e. local access points or trunk access points) 
20 using a 802.3 link initially. 

[0068] Additionally, where local access points or remote access points with T1 trunks are used, the following rules 
are followed. 

25 1 . Local access points are co-located with the wireless hub and connected to it using point to point 802.3 links or 

a shared 802.3 network. Remote access points are connected to the wireless hub using point to point T1 trunks. 

2. Sectorization is supported by adding access points with sectored antennas to the cell site. 

30 3. For each access point connected to the wireless hub, there is a foreign agent executing in the wireless hub 

which participates in end system registration. MAC layer association procedures are used to keep the MAC address 
filter tables of the access points up to date and to perform MAC layer bridging efficiently. The wireless hub partic- 
ipates in MAC association functions so that only valid MAC addresses are added to the MAC address filter tables 
of the access points. 

35 

4. The foreign agent in the wireless hub relays frames from the access points to the MSC I WF and vice versa using 
the xtunnel protocol. The MAC address filter table is used to filter out those unicast MAC data frames whose MAC 
addresses are not present in the table. The APs always forward MAC broadcast frames and MAC frames associ- 
ated with end system registration functions regardless of the contents of the MAC address filter table. 

40 

5. Local access points use ARP to resolve MAC addresses for routing IP traffic to the wireless hub. Conversely, 
the wireless hub also uses ARP to route IP packets to access points. U DP/IP is used for network management of 
access points. 

45 6. Remote access points connected via T1 do not use ARP since the link will be a point to point link. 

7. Support for hand-offs is done with assistance from the MAC layer. 
[0069] In a cell architecture using wireless trunks and trunk APs, the following rules are followed. 

50 

1 . Trunk access points are co-located with the wireless hub and connected to it using point to point 802.3 links or 
other suitable means. 

2. Wireless trunk sectorization is supported by adding trunk access points with sectored antennas to the cell site. 

55 

3. Hand-offs across backhaul sectors are done using the foreign agent in the wireless hub. For each backhaul 
sector, there is a foreign agent executing in the wireless hub. 
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4. The trunk APs do not need to participate in MAC layer end system association and hand off procedures. Their 
MAC address filter tables will be dynamically programmed by the wireless hub as end systems register with the 
network. The MAC address filter table is used to fitter out unicast MAC frames. Broadcast MAC frames or MAC 
frames containing registration packets are allowed to always pass through. 

5 

5. Trunk APs use ARP to resolve MAC addresses for routing IP traffic to the wireless hub. Conversely, the wireless 
hub use ARP to route IP packets to trunk APs. UDP/IP is used for network management of trunk APs. 

6. In a single wireless trunk sector, MAC association and hand-offs from one access point to another is done using 
10 the MAC layer with the assistance of the foreign agent in the wireless hub. Using these MAC layer procedures, 

end systems associate with access points. As end systems move from one access point to another access point, 
the access points will use a MAC hand off protocol to update their MAC address filter tables. The wireless hub at 
the cell site provides assistance to access points to perform this function. This assistance includes relaying MAC 
layer hand off messages (since access points will not be able to communicate directly over the MAC layer with 
*5 each other) and authenticating the end system for MAC layer registration and hand off and for updating the MAC 

address filter tables of the access points. 

7. The foreign agent for a wireless trunk sector is responsible for relaying frames from its trunk AP to the MSC and 
vice versa using the xtunnel protocol. Thus, the foreign agent for a trunk AP does not care about the location of 

20 the end system with respect to access points within that wireless trunk sector. In the down link direction, it just 

forwards frames from the tunnel to the appropriate trunk AP which uses MAC layer bridging to send the frames to 
all the remote access points attached in that backhaul sector. The access points consult their MAC address filter 
tables and either forward the MAC frames over the access network or drop the MAC frames. As described above, 
the MAC address filter tables are kept up to date using MAC layer association and hand off procedures. In the up 

25 link direction, MAC frames are forwarded by the access points to the backhaul bridge which forwards them to the 

foreign agent in the wireless hub using the 802.3 link. 

8. ARP is not be used for sending or receiving IP packets to the remote access points. The access points determines 
the MAC address of the wireless hub using BOOTP procedures. Conversely, the wireless hub is configured with 

30 the MAC address of remote access points. UDP/IP is used for network management of access points and for end 

system association and hand oft messages. 

[0070] IEEE Standard 802.3 links in the cell site may be replaced by other speed links. 

[0071] FIG. 7 shows the protocol stack for a local access point. At the base of the stack is physical layer PHY Physical 
55 layer PHY carries data to and from an end system over the air using radio waves as an example. When received from 
an end system, the AP receives data from the physical layer and unpacks it from the MAC frames, (the MAC layer). 
The end system data frames are then repacked into an Ethernet physical layer format (IEEE 802.3 format) where it is 
send via the Ethernet link to the wireless hub. When the AP=s processor receives data from the wireless hub via its 
Ethernet link (i.e., the physical layer), the data to be transmitted to an end system, the AP packs the data in a medium 
40 access control (MAC) format, and sends the MAC layer data to its modulator to be transmitted to the end system using 
the PHY layer. 

[0072] In FIG. 8, the MAC and PHY layers to/from the end system of FIG. 7 are replaced by a MAC and PHY for the 
trunk to the cell site for a remote access point. Specifically, for a T1 trunk, the high level data link control protocol (HDLC 
protocol) is preferably used over the T1 . 

45 [0073] FIG. 9 depicts the protocol stack for the wireless hub that bridges the backhaul line and the trunk to the remote 
access point. The trunk to the remote APs are only required to support remote access points (as distinct from Ethernet 
coupled access points). The MAC and PHY layers for the wireless trunk to the remote APs provide a point to multipoint 
link so that one trunk may be used to communicate with many remote APs in the same sector. 
[0074] The wireless hub bridges the trunk to the remote APs and the backhaul line (e.g., T1 or T3) to the network's 

so mobile switching center (MSC). The protocol stack in the wireless hub implements MAC and PHY layers to the MSC 
on top of which is implemented an IP (Internet Protocol) layer on top of which is implemented a UDP layer (Universal 
Datagram Protocal, in combination referred to as UDP/IP) for network management on top of which is implemented 
an XTunnel protocol. The XTunnel protocol is a new format that includes aspects of mobility (e.g. as in mobile IP) and 
aspects of the Level 2 Tunnel Protocol (L2TP). The XTunnel protocol is used to communicate from the wireless hub 

55 to the MSC and between inter-working functions (IWFs) in different networks or the same network. 

[0075] In FIG. 10, the protocol stack for the relay function in the base station for supporting remote access points is 
shown. The relay function includes an interface to the backhaul line (depicted as the wireless hub) and an interface to 
the remote AP (depicted as a trunk AP). From the point of view of the wireless hub, the trunk AP (depicted in FIGS. 7 
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and 10) actually behaves like the AP depicted in FIG. 7. Preferably, the base station protocol stacks are split up into 
a wireless hub and a trunk AP with an Ethernet in between. In an N-sector wireless trunk, there are N wireless trunk 
APs in the cell site and one wireless hub. 

[0076] In FIG. 11, the base station protocol stack for a cell architecture using a local AP is shown. The relay function 
5 includes an interface to the backhaul line (depicted as the wireless hub) and an air link interface to the end system 
(depicted as an AP). From the point of view of the wireless hub, the AP (depicted in FIGS. 8 and 11) actually behaves 
like the trunk AP depicted in FIG. 8. Preferably, the base station protocol stacks are split up into a wireless hub and a 
trunk AP with an Ethernet in between. In a N-sector cell, there are N access points and a single wireless hub. 
[0077] The backhaul network from the base station to the MSC has the following attributes. 

10 

1 . The network is capable of routing IP datagrams between the base station and the MSC. 

2. The network is secure. It is not a public internet. Traffic from trusted nodes only are allowed onto the network 
since the network will be used for not only transporting end system traffic, but also for transporting authentication, 

is accounting, registration and management traffic. 

3. The network has the necessary performance characteristics. 

[0078] In typical application, the service provider is responsible for installing and maintaining the backhaul network 
20 on which the equipment is installed. 

[0079] The base stations supports the following backhaul interfaces for communicating with the MSC. 

1 . Base stations support IP over PPP with HDLC links using point to point T1 or fractional T3 links. 

25 2. Base stations support IP over frame relay using T1 or fractional T3 links. 

3. Base stations support IP over AAL5/ATM using T1 or fractional T3 links. 

4. Base stations support IP over Ethernet links. 

30 

[0080] Since all of the above interfaces are based on IETF standard encapsulations, commercial routers may be 
used in the MSC to terminate the physical links of the backhaul network. Higher layers are passed on and processed 
by the various servers and other processors. 

[0081] End system registration procedures above the MAC layer are supported. In the following, end system regis- 

35 tration procedures at the MAC layer are ignored except where they impact the layers above. 

[0082] End systems may register for service on their home network or from a foreign network. In both scenarios, the 
end system uses a foreign agent (FA) in the base station to discover a point of attachment to the network and to register. 
In the former case, the FA is in the end system's home network. In the latter case, the FA is in a foreign network. In 
either case, the network uses an I WF in the end system's home network as an anchor point (i.e. , unchanging throughout 

40 the session in spite of mobility). PPP frames to and from the end system travel via the FA in the base station to the 
IWF in the home network. If the end system is at home, the home IWF is directly connected by means of the xtunnel 
protocol to the base station. Note that the home IWF may be combined with the base station in the same node. If the 
end system is roaming, a serving IWF in the foreign network is connected to the home IWF over an I -interface. The 
serving IWF relays frames between the base station and the home IWF. Note that the home IWF may be combined 

45 with the base station in the same node. From the home IWF, data is sent to a PPP server which may reside in the 
same IWF or to a separate server using the L2TP protocol. The separate server may be owned and operated by a 
private network operator (e.g. ISP or corporate intranet) who is different from the wireless service provider. For the 
duration of the session, the location of the home IWF and the PPP server remains fixed. If the end system moves while 
connected, it will have to re-register with a new foreign agent. However, the same home IWF and PPP server continues 

50 to be used. A new xtunnel is created between the new FA and the IWF and the old xtunnel between the old foreign 
agent and the IWF is destroyed. 

[0083] FIG. 1 2 shows this network configuration for two end systems A and B, both of whose home wireless network 
is wireless service provider A (WSP-A). One end system is registered from the home wireless network and the other 
from a foreign wireless network. The home IWF in WSP-A serves as the anchor point for both end systems. For both 
55 end systems, data is relayed to the home-IWF. The home IWF connects to an internet service provider's PPP server 
owned by ISP-A. Here it is assumed that both end systems have subscribed to the same ISP. If that were not the case, 
then the home IWF would be shown also connected to another ISP 

[0084] Within a wireless service providers network, data between base stations and the IWF is carried using the 
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xtunnel protocol. Data between the IWF and the PPP server is carried using Level 2 Tunneling Protocol (L2TP). Data 
between the serving IWF and the home IWF is carried using the 1 -xtunnel protocol. 

[0085] In a simple scenerio, for a user in their home network requiring fixed service, the home IWF function may be 
dynamically activated in the base station. Also, the serving IWF function may be activated for a roaming user in the 
5 base station. 

[0086] Always using an IWF in the home network has its advantages and disadvantages. An obvious advantage is 
simplicity. A disadvantage is that of always having to relay data to and from a possibly remote home IWF The alternative 
is to send all the necessary information to the serving IWF so that it may connect to the end system's ISP/intranet and 
for the serving IWF to send accounting information in near real time back to the accounting server in the home network. 
10 This functionality is more complex to implement, but more efficient because it reduces the need to relay data over 
potentially long distances from the foreign network to the home network. 

[0087] For example, consider a case of a user who roams from Chicago to Hong Kong. If the user's home network 
is in Chicago and the user registers using a wireless service provider in Hong Kong, then in the first configuration, the 
anchor point will be the home IWF in Chicago and all data will have to be relayed from Hong Kong to Chicago and vice 

'5 versa. The home IWF in Chicago will connect to the user's ISP in Chicago. With the second configuration, the end 
system user will be assigned an ISP in Hong Kong. Thus, data will not always have to be relayed back and forth 
between Chicago and Hong Kong. In the second configuration, the serving IWF will serve as the anchor and never 
change for the duration of the session even if the end system moves. However, the location of the FA may change as 
a result of end system movement in Hong Kong. 

20 [0088] FIG. 13 shows the second network configuration. In this figure, the home network for end system A and B is 
WSP-A. End system A registers from its home network, using its home IWF as an anchor point, and also connects to 
its ISP-A using the ISPs PPP server. End system B registers from the foreign network of WSP-B and uses a serving 
IWF which serves as the anchor point and connects the end system to an ISP using the ISP's PPP server. In this 
configuration, data for end system B does not have to be relayed from the foreign network to the home network and 

25 vice versa. 

[0089] In order for this configuration to work, not only must there be roaming agreements between the home and 
the foreign wireless service providers, but there also must be agreements between the foreign wireless service provider 
and the end system's internet service provider directly or through an intermediary. In the example above, not only must 
the wireless service provider in Hong Kong have a business agreement with the wireless service provider in Chicago, 
30 but the WSP in Hong Kong must have a business agreement with the user's Chicago ISP and access to the Chicago 
ISPs PPP server in Hong Kong or a business agreement with another ISP locally in Hong Kong who has a business 
agreement for roaming with the user's Chicago ISP. Additionally, the WSP in Hong Kong must be able to discover these 
roaming relationships dynamically in order to do user authentication and accounting and to set up the appropriate 
tunnels. 

35 [0090] It is difficult for those companies who are in the Internet infrastructure business to work out suitable standards 
in the IETF for all of these scenarios. Thus, a preferable embodiment for the present systems to implement the simpler, 
potentially less efficient configuration, where the IWF in the home network is always used as the anchor point. However, 
in the presence of suitable industry standardization of protocols for Internet roaming, the second configuration should 
be regarded as equivalent or alternative embodiment. 

40 [0091] An end system will have to register with the wireless network before it can start PPP and send and receive 
data. The end system first goes through the FA discovery and registration phases. These phases authenticate and 
register the end system to the wireless service provider. Once these phases are over, the end system starts PPP. This 
includes the PPP link establishment phase, the PPP authentication phase and the PPP network control protocol phase. 
Once these phases are over, the end system is able to send and receive IP packets using PPP 

45 [0092] The following discussion assumes that the end system is roaming and registering from a foreign network. 
During the FA discovery phase, the end system (through its user registration agent) waits for or solicits an advertisement 
from the foreign agent. The user registration agent uses advertisement messages sent by a near by foreign agent to 
discover the identity of the FA and to register During this phase, the user registration agent of the end system selects 
a FA and issues a registration request to it. The FA acting as a proxy registration agent forwards the registration request 

50 to its registration.server (the registration server in the foreign WSP). The registration server uses User-Name from the 
user registration agent's request to determine the end system's home network, and forwards the registration request 
for authentication to a registration server in the home network. Upon receiving the registration request relayed by the 
foreign registration server, the home registration server authenticates the identity of the foreign registration server and 
also authenticates the identity of the end system. If authentication and registration succeeds, the home registration 

55 server selects an IWF in the home network to create an l-xtunnel Wnk between the home IWF and the serving IWF (in 
the foreign WSP). The IWF in the home network serves as the anchor point for the duration of the PPP session. 
[0093] Once the authentication and registration phases are over, the various PPP phases will be started. At the start 
of PPP, an L2TP connection is created between the home IWF and requested ISP/intranet PPP server. In the PPP 
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authentication phase, PPP passwords using Password Authentication Protocol (PAP) or Challenge Authentication Pro- 
tocol CHAP are exchanged and the ISP or intranet PPP server independently authenticates the identity of the end 
system. 

[0094] Once this succeeds, the PPP network control phase is started. In this phase, an IP address is negotiated and 
assigned to the end system by the PPP server and the use of TCP/IP header compression is also negotiated. When 
this is complete, the end system is able to send and receive IP packets using PPP to its ISP or a corporate intranet. 
[0095] Note that two levels of authentication are performed. The first authentication authenticates the identity of the 
end system to the registration server in the home network and the identities of the foreign network and the home 
network to each other. To perform this function, the foreign agent forwards the end system's registration request using, 
for example, an IETF Radius protocol to a registration server in its local MSC in a Radius Access-Request packet. 
Using the end system's domain name, the foreign registration server determines the identity of the end system's home 
network and home registration server, and acting as a Radius proxy, encapsulates and forwards the request to the end 
system's home registration server. If the foreign registration server cannot determine the identity of the end system's 
home, it may optionally forward the Radius request to a registration server that acts like a broker (e.g. one that is owned 
by a consortium of wireless service providers), which can in turn proxy the Radius Access-Request to the final home 
registration server. If the local registration server is unable to service the registration request locally or by proxy ing, 
then it rejects the foreign agent's registration request and the foreign agent rejects the end system's registration request. 
Upon receiving the Radius Access-Request, the home registration server performs the necessary authentication of 
the identities of the foreign network and the end system. If authentication and registration succeeds, the home regis- 
tration server responds with a Radius Access-Response packet to the foreign registration server which sends a re- 
sponse to the foreign agent so that a round trip can be completed. The registration request is rejected if the home 
registration server is unable to comply for any reason. 

[0096] The second level of authentication verifies the identity of the end system to the intranet or ISP PPP server. 
PPP authentication, separate from mobility authentication allows the infrastructure equipment to be deployed and 
owned separately from the ISP. 

[0097] FIG. 1 4 is a ladder diagram showing the registration sequence for a roaming end system. It is assumed that 
the PPP server and the home I WF are in the same server and L2TP is not required. Note the interactions with accounting 
servers to start accounting on behalf of the registering end system and also directory servers to determine the identity 
of the home registration server and to authenticate the end system's identity. More information on accounting, billing, 
roaming (between service providers) and settlement will be provided below. 

[0098] MAC layer messages from the user registration agent of the end system may be used to initiate Agent Solic- 
itation. The MAC layer messages are not shown for clarity. 

[0099] In FIG. 14, the end system (mobile) initially solicits an advertisement and the foreign agent replies with an 
advertisement that provides the end system with information about the network to which the foreign agent belongs 
including a care-of-address of the foreign agent. Alternatively, this phase may be removed and all network advertise- 
ments may be done by a continuously emitted MAC layer beacon message. In this case, the network is assumed to 
be a foreign wireless service provider. Then, a user registration agent (in the end system) incorporates the information 
about the foreign agent (including the user name and other security credentials) and its network into a request and 
sends the request to the foreign agent. The foreign agent, as a proxy registration agent, relays the request to the foreign 
registration server (i.e., the registration server for the foreign wireless service provider. Then, the foreign registration 
server, recognizing that it is not the home directory, accesses the foreign directory server with the FDD in the foreign 
wireless service provider to learn how to direct the registration request to the home registration server of the wireless 
service provider to which the end system belongs. The foreign registration server responds with the necessary for- 
warding information. Then, the foreign registration server encapsulates the end system's registration request in a Ra- 
dius access request and relays the encapsulated request to the home registration server of the wireless service provider 
to which the end system belongs. The home registration server accesses the home directory server with the HDD of 
the home registration server to learn at least authentication information about the foreign service provider. Optionally, 
the home registration server accesses the subscriber's directory to learn detail subscriber service profile information 
(e.g., quality of service options subscribed to, etc.). When all parties are authenticated, the home registration server 
sends a start I WF request to the home IWF and PPP server. The home I WF and PPP server starts the home accounting 
server and then sends a start IWF response to the home registration server. The home registration server then sends 
a Radius access response to the foreign registration server. The foreign registration server then sends a start IWF 
request to the serving IWF server. The serving IWF server starts the serving accounting server and then sends a start 
IWF response to the foreign registration server. The foreign registration server sends a registration reply to the foreign 
agent, and the foreign agent relays the registration reply to the end system. 

[0100] A link control protocol (LCP) configuration request is send by the end system through the foreign registration 
server to the home IWF and PPP server. The home IWF and PPP server sends an LCP configuration acknowledgment 
through the foreign registration server to the end system. 
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[0101] Similarly, a password authentication protocol (PAP) authentication request is sent to and acknowledged by 
the home IWF and PPP server. Alternatively, a challenge authentication protocol (CHAP) may be used to authenticate. 
Both protocols may be used to authenticate or this phase may be skipped. 

[0102] Similarly, an IP configuration protocol (IPCP) configure request is sent to and acknowledged by the home 
5 IWF and PPP server. 

[0103] The connection to the end system may be terminated because of any one of the following reasons. 

1 . User initiated termination. Under this scenario, the end system first terminates the PPP gracefully. This includes 
terminating the PPP network control protocol (IPCP) followed by terminating the PPP link protocol. Once this is 

10 done, the end system de-registers from the network followed by termination of the radio link to the access point. 

2. Loss of wireless link. This scenario is detected by the modem and reported to the modem driver in the end 
system. The upper layers of the software are notified to terminate the stacks and notify the user. 

'5 3. Loss of connection to the foreign agent This scenario is detected by the mobility driver in the end system. After 

trying to reestablish contact with a (potentially new) foreign agent and failing, the driver sends an appropriate 
notification up the protocol stack and also signals the modem hardware below to terminate the wireless link. 

4. Loss of connection to the IWF. This is substantially the same as for loss of connection to the foreign agent. 

20 

5. Termination of PPP by IWF or PPP server. This scenario is detected by the PPP software in the end system. 
The end system's PPP driver is notified of this event. It initiates de-registration from the network followed by ter- 
mination of the wireless link to the access point. 

25 [01 04] End system service configuration refers to the concept of configuring the network service for an end system 
based on the subscriber's service profile. The subscriber's service profile is stored in a subscriber directory. The service 
profile contains information to enable the software to customize wireless data service on behalf of the subscriber. This 
includes information to authenticate the end system, allow the end system to roam and set up connections to the end 
system's internet service provider. Preferably, this information also includes other parameters, like, quality of service. 

30 In addition to the subscriber directory, a home domain directory (HDD) and a foreign domain directory (FDD) are used 
for roaming and for authenticating the foreign and home registration servers to each other. The HDD stores information 
about the end system's home network and the FDD stores information about foreign networks that a subscriber may 
visit. 

[0105] FIG. 15 shows how these directories map into the network architecture and are used during registration for 

35 an end system that is registering at home. In step 0 the end system (mobile) solicits and receives an advertisement 
from the foreign agent to provides the end system with information about the network to which the foreign agent belongs. 
In this case, the network is the home wireless service provider. In step 1, user registration agent (in the end system) 
incorporates the information about the foreign agent and its network and its security credentials into a request and 
sends the request to the foreign agent. In step 2, the foreign agent, as a proxy registration agent, relays the request 

40 to the home registration server. In step 3, the home registration server accesses the HDD of the home wireless service 
provider to learn at least authentication information. In step 4, the home registration server accesses the subscriber 
directory to learn detail subscriber service profile information (e.g., quality of service options subscribed to, etc.). In 
step 5, the home registration server notifies the foreign agent of the access response. In steps 6 and 7, the foreign 
agent notifies the end system (i.e., mobile) of the registration reply. 

45 [0106] FIG. 1 6 shows directory usage for an end system that is registering from a foreign network. In step 0 the end 
system (mobile) solicits and receives an advertisement and the foreign agent advertises which provides the end system 
with information about the network to which the foreign agent belongs. In this case, the network is a foreign wireless 
service provider. In step 1, user registration agent (in the end system) incorporates the information about the foreign 
agent and its network and its security credential into a request and sends the request to the foreign agent. In step 2, 

50 the foreign agent, as a proxy registration agent, relays the request to the foreign registration server (i.e., the registration 
server for the foreign wireless service provider. In step 3, the foreign registration server accesses the HDD of foreign 
wireless service provider to learn the network to which the end system belongs. In step 4, the foreign registration server 
forwards the end system's request to the home registration server of the end system's home wireless service provider. 
In step 5, the home registration server accesses the FDD of the home registration server to learn at least authentication 

55 information about the foreign service provider. In step 6, the home registration server accesses the subscriber's direc- 
tory to learn detail subscriber service profile information (e.g., quality of service options subscribed to, etc.). In step 7, 
the home registration server notifies the foreign registration server of the access response. In step 8, the foreign reg- 
istration server forwards to the foreign agent the access response. In step 9, the foreign agent notifies the end system 
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(i.e., mobile) of the registration reply. 

[01 07] Protocol handling scenarios handle bearer data and the associated stacks for transporting bearer data to and 
from an end system. The protocol stacks for the cell architectures use local APs (FIG. 17) and remote APs (FIG. 18). 
[0108] FIG. 17 shows the protocol stacks for handling communications between an end system (in its home network) 
5 and a home IWF for End System @ Home. FIG. 17 shows the protocol handling for a cell architecture where the access 
point and the wireless hub are co-located. 

[0109] FIG. 18 shows the protocol handling for a cell architecture where the access point is located remotely from 
the wireless hub. As shown, PPP terminates in the IWF and the configuration provides direct internet access. The 
configuration for the case where the PPP server is separate from the IWF is described later 

10 [0110] In FIG. 18, PPP frames from the end system are encapsulated in RLP (radio link protocol) frames which are 
encapsulated at the remote access point in MAC frames for communicating with the trunk access point (i.e., an access 
point physically located near the wireless hub), the remote access point being coupled to the access point by, for 
example, a wireless trunk). The access point functions as a MAC layer bridge and relays frames from the air link to 
the foreign agent in the wireless hub. The foreign agent de-encapsulates the RLP frames out of the MAC frames, and 

is using the xtunnel protocol, relays the RLP frames to the IWF. A similar, albeit reverse, process occurs for transmitting 
frames from the IWF to the end system. 

[0111] If the end system moves to another foreign agent, then a new xtunnel will be automatically created between 
the new foreign agent and the IWF, so that PPP traffic continues to flow between them, without interruption. 
[0112] tn the remote AP cell architecture (FIG. 18) using wireless trunks between the remote AP and the trunk AR 
20 the air link between the end system and the access point may operate at a different frequency (fl) and use a different 
radio technology as compared to the frequency (f2) and radio technology of the trunk. 

[0113] FIG. 1 9 shows the protocol stacks for a roaming end system. The serving IWF uses of the l-xtunnet protocol 
between the serving IWF and home IWF. The rest of the protocol stacks remain unchanged and are not shown. This 
architecture may be simplified by merging the serving IWF into the base station, thus eliminating the XWD protocol. 

25 [0114] The RLP layer uses sequence numbers to drop duplicate PPP datagrams and provide in-sequence delivery 
of PPP datagrams between the end system and the IWF. It also provides a configurable keep-alive mechanism to 
monitor link connectivity between the end system and the IWF Additionally, in an alternative embodiment, the RLP 
layer also provides re-transmission and flow control services in order to reduce the overall bit error rate of the link 
between the end system and the IWF The RLP between the end system and the IWF is started at the beginning of 

30 the session and remains active throughout the session and even across hand-off s. 

[0115] In contrast to the specification in the mobile IP RFC (RFC 2003), IP in IP encapsulation is not used for tunneling 
between the foreign agent and the home IWR Instead a new tunneling protocol, implemented on top of UDP is used. 
This tunneling protocol is a simplified version of the L2TP protocol. The reasons for this choice are as follows. 

35 1. The encapsulation protocol specified in RFC 2003 does not provide flow control or in-sequence delivery of 

packets. The presently described network may need these services in the tunnel over the backhaul. Flow control 
may be needed to reduce the amount of retransmissions over the air link because of packet loss due to flow control 
problems over the network between the base station and the MSC or because of flow control problems in the base 
station or the IWR 

40 

2. By using a UDP based tunneling protocol, the implementation can be done at the user level and then put into 
the kernel for performance reasons, after it has been debugged. 

3. Using RFC 2003, there is no easy way of creating tunnels taking into account quality of service and load bal- 
45 ancing. In order to take QOS into account, it should be possible to set up tunnels over links that already provide 

the required QOS. Secondly, using RFC 2003, there is no easy way to provide toad balancing to distribute bearer 
traffic load over multiple links between the base station and the MSC. 

4. In order to implement IP in IP encapsulation as specified in RFC 2003, developers require access to IP source 
50 code. In commercial operating systems, source code for the TCP/IP stack is generally proprietary to other equip- 
ment manufacturers. Purchasing the TCP/IP stack from a vendor and making changes to the IP layer to support 
mobile IP tunneling would require a developer to continue supporting a variant version of the TCP/IP stack. This 
adds cost and risk. 

55 [0116] While it is noted that the tunneling protocol between the base station and the IWF is non-standard and that 
the wireless service provider will not be able to mix and match equipment from different vendors, the use of a non- 
standard tunneling protocol within a single wireless service provider network is transparent to end systems and equip- 
ment from other vendors. 
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[0117] The new tunneling protocol is based on L2TR By itself, L2TP is a heavyweight tunneling protocol so that L2TP 
has a lot of overhead associated with tunnet creation and authentication. The new tunneling protocol of the present 
system has less overhead. The new xtunnel protocol has the following features. 

s 1 . The xtunnel creation adds vendor specific extensions to Radius Access Request and Radius Access Response 

messages between the base station and the registration server. These extensions negotiate tunnel parameters 
and to create the tunnel. 

2. The registration server is able to delegate the actual work of tunneling and relaying packets to a different IP 
10 address, and therefore, to a different server in the MSC. This permits the registration server to do load balancing 

across multiple IWF servers and to provide different QOS to various users. 

3. The xt unnel protocol supports in-band control messages for tunnel management. These messages include echo 
request/response to test tunnel connectivity, disconnect request/response/notify to disconnect the tunnel and error 

*5 notify for error notifications. These messages are sent over the tunneling media, for example, UDP/IP. 

4. The xtunnel protocol sends payload data over the tunneling media, for example, UDP/IP. The xtunnel protocol 
supports flow control and in-sequence packet delivery. 

20 5. The xtunnel protocol may be implemented over media other than UDP/IP for quality of service. 

[0118] The network supports direct internet connectivity by terminating the PPP in the home IWF and routing IP 
packets from the IWF to the internet via a router using standard IP routing techniques. Preferably, the IWF runs Routing 
Information Process (RIP), and the router also runs RIP and possibly other routing protocols like Open Shortest Path 
2S First (OSPF). 

[0119] The network supports a first configuration for a wireless service provider who is also an internet service pro- 
vider. In this configuration, the home IWF in the MSC also functions as a PPP server. This IWF also runs internet 
routing protocols like RIP and uses a router to connect to the internet service provider's backbone network. 
[0120] The network supports a second configuration for a wireless service provider who wishes to allow end systems 

30 to connect to one or more internet service providers, either because the WSP itself is not ISPs, or because the WSP 
has agreements with other ISPs to provide access to end users. For example, a wireless service provider may elect 
to offer network access to an end user and may have an agreement with a 3 rd party ISP to allow the user who also 
has an account with the 3 rd party ISP to access the ISP from the WSP network. In this configuration, the PPP server 
does not run in the home IWF installed at the MSC. Instead, a tunneling protocol like L2TP (Layer Two Tunneling 

35 Protocol) is used to tunnel back to the ISP's PPP server. FIG. 10 shows the protocol stacks for this configuration for 
an end system that is at home. 

[0121] The location of the home IWF and the ISP PPP server remains fixed throughout the PPP session. Also, the 
L2TP tunnel between the IWF and the ISP's PPP server remains up throughout the PPP session. The physical link 
between the IWF and the PPP server is via a router using a dedicated T1 or T3 or frame relay or ATM network. The 
40 actual nature of the physical link is not important from the point of view of the architecture. 

[01 22] This configuration also supports intranet access. For intranet access, the PPP server resides in the corporate 
intranet and the home IWF uses L2TP to tunnel to it. 

[0123] For a fixed end system, the protocol handling for intranet or ISP access is as shown in FIG. 20 with the 
difference that the roaming end system uses a serving IWF to connect to its home IWF. The protocol handling between 
45 a serving IWF and a home IWF has been described earlier. In Figure 20, the home IWF may be merged into the wireless 
hub eliminating the X-Tunnel protocol. Also, the serving IWF may be merged into the wireless hub, thus eliminating 
the X-Tunnel protocol. 

[0124] FIG. 21 shows the protocol stacks used during the registration phase (end system registration) for a local AP 
cell architecture. The stack for a remote AP cell architecture is very similar. 
50 [0125] The scenario shown above is for a roaming end system. For an end system at home, there is no foreign 
registration server in the registration path. 

[0126] Note the mobility agent in the end system. The mobility agent in the end system and foreign agent in the 
wireless hub are conceptually similar to the mobile IP RFC 2002. The mobility agent handles network errors using 
timeouts and re-trys. Unlike the known protocol stacks for bearer data, RLP is not used. The foreign agent and the 
55 registration servers use Radius over UDP/IP to communicate with each other for registering the end system. 

[0127] Several aspects of security must be considered. The first, authenticating the identities of the end system and 
the foreign/home networks during the wireless registration phase. Second, authenticating the identity of the end system 
with its PPP server during the PPP authentication phase. Third, authentication for storing accounting data, for billing 
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and for updating home domain information. Fourth, encryption of bearer traffic transmitted to and from the end system. 
Fifth, encryption for exchanging billing information across service provider boundaries. 

[01 28] Shared secrets are used to authenticate the identity of end systems with their home networks and the identity 

of the home and foreign networks with each other during wireless registration. 
s [01 29] End system authentication uses a 1 28-bit shared secret to create an authenticator for its registration request. 

The authenticator is created using the known MD5 message digest algorithm as described in the mobile IP RFC 2002. 

Alternatively, a different algorithm may be used. The shared secret is not sent in the registration request by the end 

system. Only the authenticator is sent. On receiving the registration request from the end system, the home registration 

server re-computes the authenticator over the registration request data using the shared secret. If the computed au- 
10 thenticator value matches the authenticator value sent by the end system, the home registration server allows the 

registration process to proceed. If the values do not match, the home registration server logs the event, generates a 

security violation alarm and a nak (i.e., a negative acknowledgment) to the request. 

[0130] In the registration reply, the home registration server does the same - that is to say, uses the shared secret 
to create an authenticator for the registration reply that it sends to the end system. Upon receiving the reply, the end 

*s system re-computes the authenticator using the shared secret. If the computed value does not match the authenticator 
value sent by the home registration server in the reply, the end system discards the reply and tries again. 
[0131] These network security concepts are similar to the concepts defined in mobile IP RFC 2002. According to the 
RFC, a mobility security association exist between each end system and its home network. Each mobility security 
association defines a collection of security contexts. Each security context defines an authentication algorithm, a mode, 

20 a secret (shared or public-private), style of replay protection and the type of encryption to use. In the context of the 
present network, the end system's User-Name (in lieu of the mobile IP home address) is used to identify the mobility 
security association between the end system and its home network. Another parameter, called the security parameter 
index (SPI), is used to select a security context within the mobility security association. In a basic embodiment of the 
invention, only the default mobile IP authentication algorithm (keyed-MD5) and the default mode ("prefix+suffix") are 

25 supported with 128-bit shared secrets. Network users are allowed to define multiple shared secrets with their home 
networks. The mechanism for creating security contexts for end users, assigning an SPI to each security context and 
for setting the contents of the security context (which includes the shared secret) and for modifying their contents are 
described below. During registration, a 128-bit message digest is computed by the end system in prefix+suffix mode 
using the MD5 algorithm. The shared secret is used as the prefix and the suffix for the data to be protected in the 

30 registration request. The authenticator thus computed, along with the SPI and the User-Name are transmitted in the 
registration request by the end system. Upon receiving the end system's registration request, the foreign registration 
server relays the request along with the authenticator and the SPI, unchanged to the home registration server. Upon 
receiving the registration request directly from the end system or indirectly via a foreign registration server, the home 
registration server uses the SPI and the User-Name to select the security context. The home server re-computes the 

35 authenticator using the shared secret. If the computed authenticator value matches the value of the authenticator sent 
in the request by the end system, the user's identity will have been successfully authenticated. Otherwise, the home 
registration server naks (negatively acknowledges) the registration request sent by the end system. 
[0132] The registration reply sent by the home registration server to the end system is also authenticated using the 
algorithm described above. The SPI and the computed authenticator value is transmitted in the registration reply mes- 

40 sage by the home server to the end system. Upon receiving the reply, the end system re-computes the authenticator, 
and if the computed value does not match the transmitted value, it will discard the reply and retry. 
[0133] The user's end system has to be configured with the shared secret and SPIs for all security contexts that the 
user shares with its registration server(s). This configuration information is preferably stored in a Win 95 registry for 
Windows 95 based end systems. During registration, this information is accessed and used for authentication purposes. 

45 [0134] In the network, Radius protocols are used by foreign agent FA to register the end system and to configure 
the xtunnel between the wireless hub and the home and serving IWFs on behalf of the end system. On receiving a 
registration request from the end system, the FA creates a Radius Access-Request packet, stores its own attributes 
into the packet, copies the end system's registration request attributes unchanged into this packet and sends the 
combined request to the registration server in the MSC. 

so [0135] Radius authentication requires that the Radius client (in this case, the FA in the base station) and the Radius 
server (in this case, the registration server in the MSC) share a secret for authentication purposes. This shared secret 
is also used to encrypt any private information communicated between the Radius client and the Radius server. The 
shared secret is a configurable parameter. The network follows the recommendations in the Radius RFC and uses the 
shared secret and the MD5 algorithm for authentication and for encryption, where encryption is needed. The Radius- 

55 Access Request packet sent by the FA contains a Radius User-Name attribute (which is provided by the end system) 
and a Radius User-Password attribute. The value of the User-Password attribute is also a configurable value and 
encrypted in the way recommended by the Radius protocol. Other network specific attributes, which are non-standard 
attributes from the point of view of the Radius RFC standards, are encoded as vendor specific Ftadius attributes and 
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sent in the Access-Request packet. 

[0136] The following attributes are sent by the FA to its registration server in the Radius Access-Request packet. 

1. User-Name Attribute. This is the end system's user-name as supplied by the end system in its registration 
s request. 

2. User-Password Attribute. This user password is supplied by the base station/wire less hub on behalf of the user. 
It is encoded as described in the Radius EFC using the secret shared between the base station and its registration 
server. 

w 

3. NAS-Port. This is the port on the base station. 

4. NAS-IP- Address. This is the IP address of the base station. 
'5 5. Service-Type. This is framed service. 

6. Framed Protocol. This is a PPP protocol. 

7. Xtunnel Protocol Parameters. These parameters are sent by the base station to specify the parameters neces- 
20 sary to set up the xtunnel protocol on behalf of the end system. This is a vendor-specific attribute. 

8. AP-IP-Address. This is the IP address of the AP through which the user is registering. This is a vendor-specific 
attribute. 

25 9. AP-MAC-Address. This is the MAC address of the AP through which the user is registering. This is a vendor- 

specific attribute. 

10. End system's Registration Request The registration request from the end system is copied unchanged into 
this vendor specific attribute. 

30 

[01 37] The following attributes are sent to the FA from the registration server in the Radius Access-Response packet. 

1 . Service Type. This is a framed service. 

35 2. Framed-Protocol. This is a PPP. 

3. Xtunnel Protocol Parameters. These parameters are sent by the registration server to specify the parameters 
necessary to set up the xtunnel protocol on behalf of the end system. This is a vendor-specific attribute. 

40 4. Home Registration Server's Registration Reply. This attribute is sent to the FA from the home registration server. 

The FA relays this attribute unchanged to the end system in a registration reply packet. If there is a foreign regis- 
tration server in the path, this attribute is relayed by it to the FA unchanged. It is coded as a vendor-specific attribute. 

[01 38] To provide service to roaming end systems, the foreign network and the home network are authenticated to 
45 each other for accounting and billing purposes using the Radius protocol for authentication and configuration. This 
authentication is performed at the time of end system registration. As described earlier, when the registration server 
in the foreign network receives a registration request from an end system (encapsulated as a vendor specific attribute 
in a Radius-Access Request packet by the FA), it uses the end system's User-Name to determine the identity of the 
end system's home registration server by consulting its home domain directory HDD. The following information is stored 
so in home domain directory HDD and accessed by the foreign registration server in order to forward the end system's 
registration request 

1. Home Registration Server IP Address. This is the IP address of the home registration server to forward the 
registration request. 

55 

2. Foreign Registration Server Machine Id. This is the machine ID of the foreign registration server in SMTP (sim- 
plified mail transfer protocol) format (e.g., machine @fqdn where machine is the name of the foreign registration 
server machine and fqdn is the fully qualified domain name of the foreign registration server's domain). 
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3. Tunneling Protocol Parameters. These are parameters for configuring the tunnel between the serving IWF and 
the home IWF on behalf of the end system. These include the tunneling protocol to be used between them and 
the parameters for configuring the tunnel. 

s 4. Shared Secret This is the shared secret to be used for authentication between the foreign registration server 

and the home registration server. This secret is used for computing the Radius User-Password attribute in the 
Radius packet sent by the foreign registration server to the home registration server. It is defined between the two 
wireless service providers. 

10 5. User-Password. This is the user password to be used on behalf of the roaming end system. This user password 

is defined between the two wireless service providers. This password is encrypted using the shared secret as 
described in the Radius RFC. 

6. Accounting Parameters. These are parameters for configuring accounting on behalf of the end system that is 
is registering. These parameters are sent by the registration server to its IWF for configuring accounting on behalf 

of the end system. 

[0139] Using this information, the foreign registration server creates a Radius Access-Request, adds its own regis- 
tration and authentication information into the Radius Access-Request, copies the registration information sent by the 
20 end system unchanged into the Radius Access-Request and sends the combined request to the home registration 
server. 

[0140] Upon receiving the Radius-Access Request from the foreign registration server (for a roaming end system) 
or directly from the FA (for an end system at home), the home registration server consults its own directory server for 
the shared secrets to verify the identity of the end system and the identity of the foreign registration server in a roaming 
25 scenario by re-computing authenticators. 

[0141] After processing the request successfully, the home registration server creates a Radius Access-Accept re- 
sponse packet and sends it to the foreign registration server if the end system is roaming, or directly to the FA from 
which it received the Radius Access-Request. The response contains the registration reply attribute that the FA relays 
to the end system. 

30 [0142] If the request can not be processed successfully, the home registration server creates a Radius Access-Reject 
response packet and sends it to the foreign registration server if the end system is roaming, or directly to the FA from 
which it received the Radius Access-Request. The response contains the registration reply attribute that the FA will 
relays to the end system. 

[0143] In a roaming scenario, the response from the home registration server is received by the foreign registration 
35 server. It is authenticated by the foreign registration server using the shared secret. After authenticating, the foreign 
registration server processes the response, and in turn, it generates a Radius response packet (Accept or Reject) to 
send to the FA. The foreign registration server copies the registration reply attribute from the home registration servers 
Radius response packet, unchanged, into its Radius response packet. 

[0144] When the FA receives the Radius Access-Response or Radius Access-Reject response packet, it creates a 
40 registration reply packet using the registration reply attributes from the Radius response, and sends the reply to the 
end system, thus completing the round trip registration sequence. 

[0145] Mobile IP standards specifies that replay protection for registrations are implemented using time stamps, or 
optionally, using nonces. However, since replay protection using time stamps requires adequately synchronized time- 
of-day clocks between the corresponding nodes, the present system implements replay protection during registration 
45 using nonces even though replay protection using time stamps is mandatory in the Mobile IP standards and the use 
nonces is optional. However, replay protection using time stamps as an alternative embodiment is envisioned. 
[0146] The style of replay protection used between nodes is stored in the security context in addition to the authen- 
tication context, mode, secret and type of encryption. 

[0147] The network supports the use of PPP PAP (password authentication) and CHAP (challenge authenticated 
50 password) between the end system and its PPP server. This is done independently of the registration and authentication 
mechanisms described earlier. This allows a private intranet or an ISP to independently verify the identity of the user 
[0148] Authentication for accounting and directory services is described below with respect to accounting security. 
Access to directory servers from network equipment in the same MSC need not be authenticated. 
[01 49] The network supports encryption of bearer data sent between the end system and the home IWF End systems 
55 negotiate encryption to be on or off by selecting the appropriate security context. Upon receiving the registration request, 
the home registration server grants the end system's request for encryption based upon the security context. In addition 
to storing the authentication algorithm, mode, shared secret and style of replay protection, the security context is also 
used to specify the style of encryption algorithm to use. If encryption is negotiated between the end system and the 



21 



EP 0 917 328 A2 



home agent, then the complete PPP frame is so encrypted before encapsulation in RLP. 

[01 50] The IWF, the accounting server and the billing system are part of the same trusted domain in the MSC. These 
entities are either connected on the same LAN or part of a trusted intranet owned and operated by the wireless service 
provider. Transfer of accounting statistics between the IWF and the accounting server and between the accounting 
s server and the customer's billing system may be encrypted using Internet IP security protocols like IP-Sec. 

[0151] The network makes it more difficult to monitor the location of the end system because it appears that all PPP 
frames going to and from the end system go through the home IWF regardless of the actual location of the end system 
device. 

[0152] Accounting data is collected by the serving IWF and the home IWF in the network. Accounting data collected 
10 by the serving IWF is sent to an accounting server in the serving IWF's MSC. Accounting data collected by the home 
IWF is sent to an accounting server in the home IWF's MSC. The accounting data collected by the serving IWF is used 
by the foreign wireless service provider for auditing and for settlement of bills across wireless service provider bound- 
aries (to support roaming and mobility). The accounting data collected by the home IWF is used for billing the end user 
and also for settlement across wireless service provider boundaries to handle roaming and mobility. 
*s [0153] Since all data traffic flows through the home IWF, regardless of the end system's location and the foreign 
agent's location, the home IWF has all the information to generate bills for the customer and also settlement information 
for the use of foreign networks. 

[0154] The serving IWF and the home IWF preferably use the Radius accounting protocol for sending accounting 
records for registered end systems. The Radius accounting protocol is as documented in a draft IETF RFC. For the 
20 present invention, the protocol has to be extended by adding vendor specific attributes for the network and by adding 
check-pointing to the Radius Accounting protocol. Check-pointing in this context refers to the periodic updating of 
accounting data to minimize risk of loss of accounting records. 

[01 55] The Radius accounting protocol runs over UDP/I P and uses re-trys based on acknowledgment and time outs. 
The Radius accounting client (serving IWFs or home IWFs) send UDP accounting request packets to their accounting 

25 servers which send acknowledgments back to the accounting clients. 

[0156] In the network, the accounting clients (serving IWF and the home IWF) emit an accounting start indication at 
the start of the user's session and an accounting stop indication at the end of the user's session. In the middle of the 
session, the accounting clients emit accounting checkpoint indications. In contrast, the Radius accounting RFC does 
not specify an accounting checkpoint indication. The software of the present system creates a vendor specific account- 

30 jng attribute for this purpose. This accounting attribute is present in all Radius Accounting-Request packets which have 
Acct-Status-Type of Start (accounting start indications). The value of this attribute is used to convey to the accounting 
server whether the accounting record is a check-pointing record or not. Check-pointing accounting reports have a time 
attribute and contain cumulative accounting data from the start of the session. The frequency of transmitting check- 
point packets is configurable in the present invention. 

35 [0157] The serving IWF and the home IWF are configured by their respective registration servers for connecting to 
their accounting servers during the registration phase. The configurable accounting parameters include the IP address 
and UDP port of the accounting server, the frequency of check-pointing, the session/multi-session id and the shared 
secret to be used between the accounting client and the accounting server. 

[0158] The network records the following accounting attributes for each registered end system. These accounting 
40 attributes are reported in Radius accounting packets at the start of the session, at the end of the session and in the 
middle (check-point) by accounting clients to their accounting servers. 

1. User Name. This is like the Radius User-Name attribute discussed above. This attribute is used to identify the 
user and is present in all accounting reports. The format is t, user@domain n where domain is the fully qualified 

45 domain name of the user's home. 

2. NAS IP Address, This is like the Radius NAS-IP-Address attribute discussed above. This attribute is used to 
identify the IP address of the machine running the home IWF or the serving IWF. 

50 3. Radio Port. This attribute identifies the radio port on the access point providing service to the user. This attribute 

is encoded as a vendor specific attribute. 

4. Access Point IP Address. This attribute identifies the IP address of the access point providing service to the 
user. This attribute is encoded as a vendor specific attribute, 

55 

5. Service Type. This is like the Radius Service-Type attribute described above. The value of this attribute is 
Framed. 
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6. Framed Protocol. This is like the Radius Framed-Protocol attribute described above. The value of this attribute 
is set to indicate PPR 

7. Accounting Status Type. This is like the Radius Acct-Status-Type attribute described above. The value of this 
s attribute may be Start to mark the start of a user's session with the Radius client and Stop to mark the end of the 

user's session with the Radius client. For accounting clients, the Acct-Status-Type/Start attribute is generated 
when the end system registers. The Acct-Status-type/Stop attribute is generated when the end system de-registers 
for any reason. For checkpoints, the value of this attribute is also Start and the Accounting Checkpoint attribute is 
also present. 

10 

8. Accounting Session Id. This is like the Radius Acct-Session-ld described above. In a roaming scenario, this 
session id is assigned by the foreign registration server when the end system issues a registration request. It is 
communicated to the home registration server by the foreign registration server during the registration sequence. 
The home network and the foreign network both know the Acct-Session-ld attribute and are able to emit this 

is attribute while sending accounting records to their respective accounting servers. In a "end system-at-home B sce- 

nario, this attribute is generated by the home registration server. The registration server communicates the value 
of this attribute to the IWF which emits it in all accounting records. 

9. Accounting Multi-Session Id. This is like the Radius Acct-Multi-Session-ld discussed above. This id is assigned 
20 by the home registration server when a registration request is received from a FA directly or via a foreign registration 

server on behalf of an end system. It is communicated to the foreign registration server by the home registration 
server in the registration reply message. The registration server(s) communicates the value of this attribute to the 
IWF(s) which emit it in all accounting records. 

25 [0159] With true mobility added to the architecture, the id is used to relate together the accounting records from 
different IWFs for the same end system if the end system moves from one IWF to another. For hand-offs across IWF 
boundaries, the Acct-Session-ld is different for accounting records emanating from different IWFs. However, the Acct- 
Multi-Session-ld attribute is the same for accounting records emitted by all IWFs that have provided service to the user. 
Since the session id and the multi-session id are known to both the foreign network and the home network, they are 

30 able to emit these attributes in accounting reports to their respective accounting servers. With the session id and the 
multi-session id, billing systems are able to correlate accounting records across IWF boundaries in the same wireless 
service provider and even across wireless service provider boundaries. 

1 . Accounting Delay Time. See Radius Acct-Delay-Time attribute. 

35 

2. Accounting Input Octets. See Radius Acct-lnput-Octets. This attribute is used to keep track of the number of 
octets sent by the end system (input to the network from the end system). This count is used to track the PPP 
frames only. The air link overhead, or any overhead imposed by RLR etc. is not counted. 

40 3. Accounting Output Octets. See Radius Acct-Output-Octets. This attribute is used to keep track of the number 

of octets sent to the end system (output from the network to the end system). This count is used to track the PPP 
frames only. The air link overhead, or any overhead imposed by RLR etc. and is not counted. 

4. Accounting Authentic See Radius Acct-Authentic attribute. The value of this attribute is Local or Remote de- 
45 pending on whether the serving IWF or the home IWF generates the accounting record. 

5. Accounting Session Time. See Radius Acct-Session-Time attribute. This attribute indicates the amount of time 
that the user has been receiving service. If sent by the serving IWF, this attribute tracks the amount of time that 
the user has been receiving service from that serving IWF If sent by the home IWF, this attribute tracks the amount 

50 of time that the user has been receiving service from the home IWF. 

6. Accounting Input Packets. See Radius Acct-lnput-Packets attribute. This attribute indicates the number of pack- 
ets received from the end system. For a serving IWF, this attribute tracks the number of PPP frames input into the 
serving IWF from an end system. For a home IWF, this attribute tracks the number of PPP frames input into the 

55 home IWF from an end system. 

7. Accounting Output Packets. See Radius Acct-Output- Packets attribute. This attribute indicates the number of 
packets sent to the end system. For a serving IWF, this attribute tracks the number of PPP frames output by the 
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serving I WF to the end system. For a home IWF, this attribute tracks the number of PPP frames sent to the end 
system from the home IWF. 

8. Accounting Terminate Cause. See Radius Acct-Terminate-Cause attribute. This attribute indicates the reason 
s why a user session was terminated. In addition, a specific cause code is also present to provide additional details. 

This attribute is only present in accounting reports at the end of the session. 

9. Network Accounting Terminate Cause. This attribute indicates a detailed reason for terminating a session. This 
specific attribute is encoded as a vendor specific attribute and is only reported in a Radius Accounting attribute at 

10 the end of session. The standard Radius attribute Acct-Terminate-Cause is also present. This attribute provides 

specific cause codes, not covered by the Acct-Terminate-Cause attribute. 

10. Network Air link Access Protocol. This attribute indicates the air link access protocol used by the end system. 
This attribute is encoded as a vendor specific attribute. 

is 

11 . Network Backhaul Access Protocol. This attribute indicates the backhaul access protocol used by the access 
point to ferry data to and from the end system. This attribute is encoded as a vendor specific attribute. 

12. Network Agent Machine Name. This attribute is the fully qualified domain name of the machine running the 
20 home IWF or the serving IWF. This specific attribute is encoded in vendor specific format. 

1 3. Network Accounting Check-point. Since the Radius accounting RFC does not define a check-point packet, the 
present network embodiment uses a Radius accounting start packet with this attribute to mark a check-point. The 
absence of a check-point attribute means a conventional accounting start packet. The presence of this attribute 

25 jn a accounting start packet means a accounting check-point packet. Accounting stop packets do not have this 

attribute. 

[0160] In the preferred embodiment, every accounting packet and the corresponding reply must be authenticated 
using MD5 and a shared secret. The IWFs are configured with a shared secret that are used by them for authentication 
30 during communication with their Radius accounting server. The shared secrets used by the IWFs for communicating 
with accounting servers are stored in the home/foreign domain directory located in the MSC. The shared secrets for 
accounting security are communicated to the IWFs by their registration servers during the end system registration 
sequence. 

[0161] The accounting server software runs in a computer located in the MSC. The role of the accounting server in 
35 the system is to collect raw accounting data from the network elements (the home and the serving IWFs), process the 
data and store it for transfer to the wireless service provider's billing system. The accounting server does not include 
a billing system. Instead, it includes support for an automatic or manual accounting data transfer mechanism. Using 
the automatic accounting data transfer mechanism, the accounting server transfers accounting records in AMA billing 
format to the customer's billing system over a TCP/IP transport. For this purpose, the system defines AMA billing record 
40 formats for packet data. Using the manual transfer mechanism, customers are able to build a tape to transfer accounting 
records to their billing system. In order to build the tape to their specifications, customers are provided with information 
to access accounting records so that they may process them before writing them to tape. 

[0162] In FIG. 22, the raw accounting data received by the accounting server from the home or serving IWFs are 
processed and stored by the accounting server. The processing done by the accounting server includes filtering, com- 
45 pression and correlation of the raw accounting data received from the IWF. A high availability file server using dual 
active/standby processors and hot swappable RAID disks is used for buffering the accounting data while it is transiting 
through the accounting server. 

[0163] The accounting server delays processing of the raw accounting data until an end system has terminated its 
session. When an end system terminates its session, the accounting server processes the raw accounting data that 

so it has collected for the session and stores an accounting summary record in a SQL database. The accounting summary 
record stored in the SQL data base points to an ASN.1 encoded file. This file contains detailed accounting information 
about the end system's session. The data stored in the accounting server is then transferred by the billing data transfer 
agent to the customer's billing system. Alternatively, the wireless service provider may transfer the accounting data 
from the SQL database and/or the ASN.1 encoded file to the billing system via a tape. The data base scheme and the 

55 format of the ASN.1 encoded file are documented and made available to customers for this purpose. If the volume of 
processed accounting data stored in the accounting system exceeds a high water mark, the accounting server gener- 
ates an NMS alarm. This alarm is cleared when the volume of data stored in the accounting server falls below a low 
water mark. The high and low water marks for generating and clearing the alarm are configurable. The accounting 
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server also generates an NMS alarm if the age of the stored accounting data exceeds a configurable threshold. Con- 
versely, the alarm is cleared, when the age of the accounting data falls below the threshold. 

[0164] The subscriber directory is used to store information about subscribers and is located in the home network. 
The home registration server consults this directory during the registration phase to authenticate and register an end 
s system. For each subscriber, the subscriber directory stores the following information. 

1. User-Name. This field in the subscriber record will be in SMTP format (e.g., user@fqdn) where the user sub- 
field will identify the subscriber in his or her wireless home domain and the fqdn sub-field will identify the wireless 
home domain of the subscriber. This field is sent by the end system in its registration request during the registration 

io phase. This field is assigned by the wireless service provider to the subscriber at the time of subscription to the 

network service. This field is different than the user name field used in PPR 

2. Mobility Security Association. This field in the subscriber record contains the mobility security association be- 
tween the subscriber and his or her home network. As described above, a mobility security association exists 

is between each subscriber and its home registration server. The mobility security association defines a collection 

of security contexts. Each security context defines an authentication algorithm, an authentication mode, a shared 
secret, style of replay protection and the type of encryption (including no encryption) to use between the end system 
and its home server. During registration, the home registration server retrieves information about the subscriber's 
security context from the subscriber directory usingthe User-Name and the security parameter index (SPI) supplied 

20 by the end system in its registration request. The information in the security context is used for enforcing authen- 

tication, encryption and replay protection during the session. The mobility security association is created by the 
wireless service provider at the time of subscription. It is up to the wireless service provider to permit the subscriber 
to modify this association either by calling up a customer service representative or by letting subscribers access 
to a secure Web site. The Web site software will export web pages which the wireless service provider may make 

25 accessible to subscribers from a secure web server In this way, subscribers are able to view/modify the contents 

of the mobility security association in addition to other subscriber information that the service provider may make 
accessible. 

3. Modem MAC Address. This field contains the MAC address of the modem owned by the subscriber. In addition 
30 to the shared secret, this field is used during registration to authenticate the user. It is possible to turn off MAC 

address based authentication on a per user basis. The MAC address is communicated to the home registration 
server during registration. 

4. Enable MAC Address Authentication. This field is used to determine if MAC address based authentication is 
35 enabledor disabled. If enabled, the home registration server checks the MAC address of the registering end system 

against this field to validate the end system's identity. If disabled, then no checking is done. 

5. Roaming Enabled Flag. If this field is set to enabled, then the end system is allowed to roam to foreign networks. 
If this field is disabled, then the end system is not permitted to roam to foreign networks. 

40 

6. Roaming Domain List. This field is meaningful only if the Roaming Enabled Flag is set to enabled. This field 
contains a list of foreign domains that the end system is allowed to roam to. When the contents of this list is null 
and the Roaming Enabled Flag is set to enabled, the end system is allowed to roam freely 

45 7. Service Enable/Disable Flag. This field may be set to disabled by the system administrator to disable service 

to a subscriber. If this field is disabled, then the subscriber is permitted to register for service. If the subscriber is 
registered and the value of this field is set to disabled, then the subscriber's end system is immediately disconnected 
by the network. 

50 8. Internet Service Provider Association. This field contains information about the subscriber's internet service 

provider. This information is used by the I WF during the PPP registration phase to perform authentication with the 
internet service provider on behalf of the end system and also to create a L2TP tunnel between the IWF and the 
internet service provider's PPP server. This field contains the identity of the subscriber's ISP. The IWF uses this 
information to access the ISP directory for performing authentication and setting up the L2TP tunnel on behalf of 

55 the end system. 

9. Subscriber's Name & Address Information. This field contains the subscriber's name, address, phone, fax, e- 
mail address, etc. 
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[0165] The home domain directory (HDD) is used by the registration server to retrieve parameters about the end 
system to complete registration on behalf of the end system. Using this information, the registration server determines 
if the end system is registering at home or if the end system is a roaming end system. In the former case, the registration 
server assumes the role of a home registration server and proceed with end system registration. In the latter case, the 
5 registration server assumes the role of a foreign registration server and, acting as a Radius proxy, it forwards the 
request to the real home registration server whose identity it gets from this directory. For roaming end system, the 
parameters stored in the HDD include the IP address of the home registration server, the home-foreign shared secret, 
the home-serving IWF tunnel configuration etc. The HDD is located in the MSC. 
[0166] The following information is stored in the HDD. 

10 

1 . Home Domain Name. This field is used as the key to search the HDD for an entry that matches the fully qualified 
home domain name provided by the end system in its registration request. 

2. Proxy Registration Request. This field is used by the registration server to determine if it should act as a foreign 
registration server and proxy the end system's registration request to the real home registration server. 

3. Home Registration Server DNS Name. If the proxy registration requesting is TRUE, this field is used to access 
the DNS name of the real home registration server. Otherwise, this field is ignored. The DNS name is translated 
to an IP address by the foreign registration server. The foreign registration server uses the IP address to relay the 

20 end system's registration request. 

4. Foreign Domain Name. If the proxy registration request flag is TRUE, this field is used to identify the foreign 
domain name to the end system's home registration server. Otherwise, this field is ignored. The foreign registration 
server uses this information to create the foreign server machine id in SMTP format, for example, machine @fqdn. 

2S This machine id is sent to the home registration server by the foreign registration server in the Radius-Access 

Request. 

5. Shared Secret. If the proxy registration requesting is TRUE, the shared secret is used between the foreign and 
home registration servers to authenticate their identity with each other. Otherwise this field is ignored. 

30 

6. Tunneling Protocol Parameters. This field is used to store parameters to configure the tunnels to provide service 
to the end system. For an end system at home, this includes information on tunnel parameters between the base 
station and the home IWF and from the home IWF to the PPP server. For a roaming end system, this includes 
tunneling parameters from the base station to the serving IWF and from the serving IWF to the home IWF. At a 

35 minimum, for each tunnel, this field contains the type of tunneling protocol to use and any tunneling protocol specific 

parameters. For example, this field may contain the identifier for the tunneling protocol L2TP and any additional 
parameters required to configure the L2TP tunnel between the IWF and its peer. 

7. Accounting Server Association. This field is used to store information needed by the IWF to generate accounting 
40 data on behalf of the end system. It contains the name of the accounting protocol (e.g. RADIUS), the DNS name 

of the accounting server and additional parameters specific to the accounting protocol like the UDP port number, 
the shared secret that the IWF must use in the Radius Accounting protocol, the frequency of check-pointing, the 
seed for creating the sess ion/mu It i -session id, etc. The accounting server's DNS name is translated to the account- 
ing server's IP address, which is sent to the IWF. 

45 

[0167] For wireless service providers that have roaming agreements with each other, the HDD is used for authenti- 
cation and to complete the registration process. If an end system roams from its home network to a foreign network, 
the foreign registration server in that network consults the HDD in its MSC to get information about the visiting end 
system's home registration and to authenticate the home network before it provides service to the visiting end system. 

so [0168] The software for home domain directory management preferably provides a graphical user interface (GUI) 
based HDD management interface for system administrators. Using this GUI, system administrators are able to view 
and update entries in the HDD. This GUI is not intended for use by foreign wireless network service providers to perform 
remote updates based on roaming agreements. It is only intended for use by trusted personnel of the home wireless 
service provider operating behind fire walls. 

55 [0169] The foreign domain directory (FDD) provides functionality that is the reverse of the home domain directory. 
The FDD is used by the home registration server to retrieve parameters about the foreign registration server and the 
foreign network in order to authenticate the foreign network and create a tunnel between a serving IWF and a home 
IWF. These parameters include the home-foreign shared secret, the home IWF-serving IWF tunnel configuration, etc. 
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The FDD is preferably located in the home registration server's MSC. The FDD is used by home registration servers 

for registering roaming end systems. 

[0170] The following information will be stored in the FDD. 

5 1 . Foreign Domain Name. This field is used as the key to search the FDD for an entry that matches the fully qualified 

domain name of the 

2. Shared Secret This is the shared secret used between the foreign and home registration servers to authenticate 
their identity mutually with each other. 

10 

3. Home IWF-Serving IWF Tunneling Protocol Parameters. This field is used to store parameters to configure the 
tunnel between the home IWF and the serving IWF. At a minimum, this field contains the type of tunneling protocol 
to use and any tunneling protocol specific parameters. For example, this field may contain the identifier for the 
tunneling protocol L2TP and any additional parameters required to configure the L2TP tunnel between the serving 

is IWF and the home IWF. 

4. Accounting Server Association. This field is used to store information needed by the home IWF to generate 
accounting data on behalf of the end system. It contains the name of the accounting protocol (e.g. RADIUS), the 
DNS name of the accounting server and additional parameters specific to the accounting protocol like the UDP 

20 port number, the shared secret that the IWF must use in the Radius Accounting protocol, the frequency of check- 

pointing, the seed for creating the session/multi-session id, etc. The accounting server's DNS name is translated 
to the accounting server's IP address, which is sent to the foreign agent. 

[01 71] For wireless service providers that have roaming agreements with each other, the FDD is used to do authen- 
25 tication and complete the registration process. If an end system roams from its home network to a foreign network, the 
registration server in the home network consults the FDD in its MSC to get information and authenticate the foreign 
network providing service to the end system. 

[0172] The foreign domain directory management software provides a graphical user interface (GUI) based FDD 
management interface for system administrators. Using this GUI, system administrators are able to view and update 
30 entries in the FDD. This GUI is not intended for use by foreign wireless network service providers to perform remote 
updates based on roaming agreements. It is only intended for use by trusted personnel of the home wireless service 
provider operating behind firewalls. 

[0173] The internet service provider directory (ISPD) is used by the home IWF to manage connectivity with ISPs that 
have service agreements with the wireless service provider so that subscribers may access their ISPs using the net- 

35 work. For each subscriber, the subscriber directory has an entry for the subscriber's ISP This field points to an entry 
in the ISPD. The home IWF uses this information to set up the connection to the ISP on behalf of the subscriber. 
[01 74] The network architecture supports roaming. In order for roaming to work between wireless service providers, 
the architecture must support the setting up of roaming agreements between wireless service providers. This implies 
two things: (1 ) updating system directories across wireless service providers and (2) settlement of bills between service 

40 providers. 

[0175] In order to allow subscribers access to internet service providers, the architecture supports roaming agree- 
ments with internet service providers. This implies that the architecture must be able to send data to and receive data 
from ISP PPP servers (i.e., that support industry standard protocols like PPP, L2TP and Radius). It also implies that 
the architecture handles directory updates for ISP access and settlement of bills with ISPs. 

45 [0176] When roaming agreements are established between two wireless service providers, both providers have to 
update their home and foreign domain directories in order to support authentication and registration functions for end 
systems visiting their networks from the other network. At a minimum, the architecture of the present embodiment 
supports manual directory updates. When a roaming agreement is established between two wireless service providers, 
then the two parties to the agreement exchange information for populating their home and foreign domain directories. 

50 The actual updates of the directories is done manually by the personnel of the respective service providers. If later, 
the information in the home and foreign domain directories needs to be updated, the two parties to the agreement 
exchange the updated information and then manually apply their updates to the directories. 
[0177] In an alternative embodiment, the directory management software incorporates developing standards in the 
IETF to enable roaming between internet service providers and to enable ISPs to automatically manage and discover 

55 roaming relationships. This makes manual directory management no longer necessary. The network system automat- 
ically propagates roaming relationships, and discovers them, to authenticate and register visiting end systems. 
[0178] At a minimum, the network architecture just processes and stores the accounting data and makes the data 
available to the wireless service provide r=s billing system. It is up to the billing system to handle settlement of bills for 
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roaming. 

[0179] In an alternative embodiment, developing standards in the IETF to handle distribution of accounting records 
between internet service providers are incorporated into the network architecture to enable ISPs to do billing settlement 
for roaming end systems. 

s [0180] The system software supports access to ISPs and private intranets by supporting L2TP between the home 
I WF and the ISPs or intranet PPP server The internet service provider directory contains information useful to the IWF 
for creating these tunnels. As access agreements between the wireless service provider and inter net service providers 
are put in place, this directory is updated manually by the wireless service provider's personnel. Automatic updates 
and discovery of access relationships between the wireless service provider and internet service providers are presently 

10 contemplated and implemented as the internet standards evolve. While accessing an internet service provider, the 
subscriber receives two bills - one from the wireless service provider for the use of the wireless network and the second 
from the internet service provider. Although common billing that combines both types of charges is not handled by the 
minimum embodiment software, it is contemplated that the software will take advantage of internet standards for billing 
settlement as they evolve so that subscribers may receive a common bill based on roaming agreements between the 

J5 ISP and wireless service providers. 

[0181] The system includes a element management system for managing the network elements. From the element 
manager, system administrators perform configuration, performance and fault/alarm management functions. The ele- 
ment management applications run on top of a web browser. Using a web browser, system administrators manage the 
network from anywhere that they have TCP/IP access. The element manager also performs an agent role for a higher 

20 level manager. In this role it exports an SNMP Ml B for alarm and fault monitoring. 

[0182] A higher level SNMP manager is notified of alarm conditions via SNMP traps. The higher level SNMP manager 
periodically polls the element manager's MIB for the health and status of the network. System management personnel 
at the higher level manager are able to view an icon representation of the network and its current alarm state. By 
pointing and clicking on the network element icon, systems management personnel execute element management 

25 applications using a web browser and perform more detailed management functions. 

[0183] Inside the network, management of the physical and logical network elements is performed using a combi- 
nation of the SNMP protocol and internal management application programming interfaces. Applications in the element 
manager use SNMP or other management APIs to perform network management functions. 

[0184] Architecturally, the element management system includes two distinct sets of functional elements. The first 
30 set of functional elements, including the configuration data server, performance data monitor and health/status monitor 
and network element recovery software, executes on an HA server equipped with RAID disks. The second set of 
functional elements, including the management applications, executes on a dedicated, non-HA management system. 
Even if the element manager system becomes non-operational, the network elements continue to be able to run and 
report alarms and even be able to recover from fault conditions. However, since all the management applications 
35 execute in the non-HA element manager, if the element manager goes down, then recovery actions requiring human 
intervention are not possible until the element manager becomes operational. 

[0185] The wireless hubs (WHs) in the base stations are typically owned by a wireless service provider (WSP), and 
they are connected to the WSP's registration server (RS) either via point-to-point links, intranets or the Internet. The 
WSP's registration server is typically a software module executing on a processor to perform certain registration func- 

40 tions. Inter-working function units (IWF units) are typically software modules executing on a processor to perform 
certain interfacing functions. IWF units are typically connected to the registration servers via intranets/WAN, and the 
IWF units are typically owned by the WSP. However, the IWF units need not be located within the same LAN as the 
registration servers. Typically, accounting and directory servers (also software modules executing on a processor) are 
connected to the registration servers via a LAN in the service provider's Data Center (e.g., a center including one or 

45 more processors that hosts various servers and other software modules). Traffic from the end system is then routed 
via a router (connected to the LAN) to the public Internet or to an ISP's intranet. The registration server located in a 
foreign WSP's network is referred to as the foreign registration server (FRS), and the registration server located in the 
end system's home network (where the mobile purchases its service) is referred to as the home registration server 
(HRS). The inter-working function unit in the home network is referred to as the home IWF while the inter-working 

50 function unit in the foreign network (i.e., the network the end system is visiting) is referred to as the serving IWF 

[0186] For fixed wireless service (i.e., a non-moving end system), an end system may register for service on the 
home network from the home network (e.g., at home service) or from a foreign network (e.g., roaming service). The 
end system receives an advertisement sent by an agent (e.g., an agent function implemented in software) in the wireless 
hub via the access point. There are both MAC-layer registration as well as network-layer registration to be accom- 

55 plished. These may be combined together for efficiency. 

[0187] For end systems at home (FIG. 23), the network layer registration (like a local registration) make's known to 
the home registration server the wireless hub to which the end system is currently attached. An IWF in the end system's 
home network will become the anchor or home IWF. Thus, PPP frames to and from the end system travel via the 
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wireless hub to the home IWF in the home network. If the end system is at home, the home IWF is connected to the 
wireless hub via an XTunnel protocol. 

[0188] For roaming wireless service (FIG. 24), the foreign registration server determines the identity of the home 
network of the roaming end system during the registration phase. Using this information, the foreign registration server 

s communicates with the home registration server to authenticate and register the end system. The foreign registration 
server then assigns a serving IWF, and an l-XTunnel protocol connection is established between the home IWF and 
the serving IWF for the roaming end system. The serving IWF relays frames between the wireless hub and the home 
IWF. From the home IWF, data is sent to a PPP server (i.e., point-to-point protocol server) which may reside in the 
same IWF. However, if the data is to go to a corporate intranet of an ISP's intranet that has its own PPP server, the 

10 data is sent to the separate PPP server via the L2TP protocol. The separate server is typically owned and operated 
by an Internet service provider who is different from the wireless service provider. For the duration of the session, the 
locations of the home IWF and PPP server remain fixed. The MAC layer registration can be combined with the network 
registration to economize on the overhead of separate communications for MAC layer and network layer registration; 
however, it may be advantageous to not combine these registration processes so that the WSP's equipment will be 

is interoperable with other wireless networks that supports pure IETF Mobile-IP. 

[0189] Registration sets up three tables. Table 1 is associated with each access point, and Table 1 identifies each 
connection (e.g., each end system) by a connection id (CID) and associates the connection id with a particular wireless 
(WM) modem address (i.e., the address of the end system or end system). Table 2 is associated with each wireless 
hub (WH), and Table 2 associates each connection id with a corresponding wireless modem address, access point 

20 and XTunnel id (XI D). Table 3 is associated with each inter-working function (IWF), and Table 3 associates each con- 
nection id with a corresponding wireless modem address, wireless hub address, XTunnel id and IP port (IP/port). The 
entries described for these tables are described to include only relevant entries that support the discussion of mobility 
management. In reality, there are other important fields that need to be included as well. 



25 Table 1 : 
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WM1 


C1 


WM2 



35 

Table 2: 



40 
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Connection Table at WH 
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Connection Table at IWF 


CID 


WM 


WH 


XI D 


IP/Port 
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WM1 
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5 
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Table 3: (continued) 



Connection Table at IWF 


CID 


WM 


WH 


XID 


IP/Port 


C1 


WM2 


WH1 


6 


IP2/P3 


C1 


WM3 


WH1 


7 


IP3/P1 


C5 


WM5 


WH2 


8 


IP4/P1 



[0190] The protocol stacks for dial-up users at home in a network as well as roaming users are illustrated in FIGS. 
25-28. FIG. 25 depicts protocol stacks used for direct internet access by a fixed (i.e., non-moving) end system at home 

1S where a PPP protocol message terminates in the home IWF (typically collocated with the wireless hub) which relays 
message to and from an IP router and from there to the public internet. FIG. 26 depicts protocol stacks used for remote 
intranet access (i.e., either private corporate nets or an ISP) by a fixed (i.e., non-moving) end system at home where 
a PPP protocol message is relayed through the home IWF (typically collocated with the wireless hub) to a PPP server 
of the private corporate intranet or ISP. FIG. 27 depicts protocol stacks used for direct internet access by a roaming 

20 but fixed (i.e., non -moving) or a moving end system where the PPP protocol terminates in the home IWF (typically 
located in a mobile switching center of the home network) which relays message to and from an IP router. In FIG. 27, 
note how message traffic passes through a serving IWF (typically collocated with the wireless hub) in addition to the 
home IWF. FIG. 28 depicts protocol stacks used for remote intranet access (i.e., either private corporate nets or an 
ISP) by a roaming but fixed (i.e., non-moving) or a moving end system where a PPP protocol message is relayed 

25 through the home IWF (typically located in a mobile switching center of the home network) to a PPP server of the 
private corporate intranet or ISP In FIG. 28, note how message traffic passes through a serving IWF (typically collocated 
with the wireless hub) in addition to the home IWF. When the serving IWF and the wireless hub are co-located in the 
same nest of computers or are even programmed into the same computer, it is not necessary to establish a tunnel 
using the XTunnel protocol between the serving IWF and the wireless hub. 

30 [0191] Equivalent variations to these protocol stacks (e.g. the RLP can be terminated at the wireless hub rather than 
at the serving IWF or home IWF for mobiles at home) are also envisioned. If the IWF is located far from the wireless 
hub, and the packets can potentially be carried over a lossy IP network between the IWF and wireless hub, then it 
would be preferred to terminate the RLP protocol at the wireless hub. Another variation is the Xtunnel between wireless 
hub and IWF need not be built on top of the UDP/IP. Xtunnels can be built using the Frame Relay/ATM link layer. 

35 However, the use of UDP/IP makes it easier to move the wireless hub and IWF software from one network to another. 
[0192] Furthermore, the PPP protocol can be terminated in a wireless modem and sent to one or more endsystems 
via an ethernet connection. As illustrated in FIG. 29, the wireless modem 300 receives the PPP protocol information 
and encapsulates the PPP payload in an ethernet frame to be transported to at least one of the end systems 304 and 
306 via the internet connection 302. 

40 [0193] DIX ethernet can be used for encapsulating the XWD MAC primitives but the invention is not limited thereto. 
The ethernet frame format for XWD control frames is illustrated in Figure 30. The ethernet header contains a destination 
address, a source address and an ethernet type field. The destination address field contains the ethernet address of 
the MAC entity to which the primative is being sent. For MAC primitives invoked by the MAC user, this field will contain 
the ethernet address of the MAC user. For broadcast primitives, this address will be the ethernet broadcast address. 

45 The source address field contains the ethernet address of the MAC entity invoking the primitive. The ethernet type 
field contains the ethernet type for XWD. Possible values are XWD_Control for control frames and XWD_Data for data 
frames. These values must be different from all the ethernet type values that have been stnadardized and must be 
registered with the controlling authority. 

[0194] The ethernet frame then has an XWD header field. The XWD header can be 16 bits long and will only be 
50 present for XWD control frames. The fields are illustrated in FIG. 31. The ethernet frame also contains a protocol 
header, a PPP payload field and a XWD MAC field. The header values for primitives using ethernet encapsulation are 
illustrated in Table 4 below. 
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(continued) 



5 



10 



Primitive Name 


Destination Address 


Source Address 


Ethernet Type 


XWD MAC Primitive 


M_Discover.Cnf 


MAC User 


MAC Provider 


XWD_Control 
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M_OpenSap.Req 


MAC Provider 


MAC User 


XWD_Control 
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M_OpenSap.Cnf 


MAC User 


MAC Provider 


XWD_Control 
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M_CloseSap.Req 


MAC Provider 


MAC User 


XWD_Control 


4 


IVI OiUoUOCip.vl II 


MAH U<iAr 


MAf* Prrrt/iHor 
IVIMO i 1 Uv lUfcM 


Y\A/n P/^ntrnl 
AW LI_L/OntrOl 


c 
O 
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MAC Provider 


XWD_Control 
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MAC Provider 


MAC User 


XWD_Control 
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M_Connect.Req 


MAC Provider modem 
only) 


MAC User (end system 
only) 


XWD_Control 
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M_Connect.lnd 


MAC User (wireless hub 
only) 


MAC Provider (AP only) 


XWD_Control 
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M_Connect.Rsp 


MAC Provider (AP only) 


MAC User (wireless hub 
only) 


XWD_Control 


10 


M_Connect.Cnf 


MAC User (end system 
only) 


MAC Provider (modem 
only) 


XWD_Control 


11 


M_Disconect.Req 


MAC Provider 


MAC User 


XWD_Control 
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[0195] In another alternative, the PPP protocol can be terminated in a wireless router and then sent on to at least 
one end system connected to a local area network (LAN). As illustrated in FIG. 32, the wireless router 350 receives 
the PPP protocol information via the wireless modem 352. The router 354 receives the PPP information from the 
wireless modem 352 and sends the PPP information to at least one of the end systems 356, 358, 360 via a LAN link 362. 
[01 96] Four types of handoff scenarios may occur, and they are labeled: (i) local mobility, (ii) micro mobility, (iii) macro 
mobility, and (iv) global mobility. In all four scenarios (in one embodiment of the invention), a route optimization option 
is not considered so that the locations of the home registration server and the ISP's PPP server do not change. In 
another embodiment of the system with route optimization, the ISP' PPP server may change. However, this aspect is 
discussed below. In addition, the locations of the foreign registration server and IWF do not change in the first three 
scenarios. 

[0197] The proposed IETF Mobile IP standard requires that whenever an end system changes the IP subnet to which 
it is attached, it sends a registration request message to a home agent in its home subnet. This message carries a 
care-of address where the end system can be reached in the new subnet. When traffic is sent, for example, from an 
ISP to an end system, the home agent intercepts the traffic that is bound for the end system as it arrives in the home 
subnet, and then forwards the traffic to the care-of address. The care-of address identifies a particular foreign agent 
in the foreign subnet. An end system's foreign agent can reside in the end system itself, or in a separate node that in 
turn forwards traffic to the end system (i.e., proxy registration agent). Mobile IP handoff s involve exchange of control 
messages between an end system 1 agent, the end system; home agent and potentially its corresponding hosts (CHs) 
(with route optimization option). 

[0198] The proposed IETF Mobile IP standard would find it difficult to meet the latency and scalability goals for all 
movements in a large internetwork. However, the present hierarchical mobility management meets such goals. For 
small movements (e.g. a change of Access Points), only MAC-layer re-registrations are needed. For larger movements, 
network-layer re-registrations are performed. The present hierarchical mobility management is different from the flat- 
structure used in the IETF proposed Mobile-IP standard as well as the serving/anchor inter-working function model 
used in cellular systems like CDPD (based on a standard sponsored by the Cellular Digital Packet Data forum). 
[01 99] As depicted in FIG. 33, the local mobility handoff handles end system (designated MN for mobile node) move- 
ment between APs that belong to the same wireless hub. Thus, only MAC layer re -registration is required. The end 
system receives a wireless hub advertisement from a new AP and responds with a registration request addressed to 
the new AP. 

[0200] The new AP (i.e., the one that receives the registration request from the end system) creates new entries in 
its connection table and relays the registration message to its wireless hub. In local mobility handoffs, the wireless hub 
does not change. The wireless hub recognizes the end system' registration request as a MAC level registration request, 
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and it updates its connection table to reflect the connection to the new AR Then, the old AP deletes the connection 
entry from its connection table. There are at least three ways whereby the old AP can delete the old entries, namely 
(i) upon time out, (ii) upon receiving a copy of the relayed MAC layer association message from the new AP to the 
wireless hub (if this relay message is a broadcast message), and (iii) upon being informed by the wireless hub of the 

5 need to delete the entry. 

[0201] As depicted in FIG. 34, the micro mobility handoff handles end system (designated MN for mobile node) 
movement between wireless hubs that belong to the same registration server and where the end system can still be 
served by the existing serving IWF. When an advertisement is received from a new wireless hub (through a new AP), 
the end system sends a message to request registration to the registration server. The registration request is relayed 

10 from the new AP to the new wireless hub to the registration server. 

[0202] When the registration server determines that the existing IWF can still be used, the registration server sends 
a build XTunnel Request message to request the existing IWF to build an XTunnel to the new wireless hub. Later, the 
registration server sends a tear down XTunnel request message to request the existing IWF to tear down the existing 
XTunnel with the old wireless hub. The build and tear XTunnel Request messages can be combined into one message. 

is A foreign registration server does not forward the registration message to the home registration server since there is 
no change of IWF, either the serving IWF or home IWF. 

[0203] Upon receiving a positive build XTunnel reply and a positive tear XTunnel reply from IWF, the registration 
server sends a registration reply to end system. As the registration reply reaches the new wireless hub, the connection 
table at the new wireless hub is updated to reflect the connection to the new AR The new AP updates its MAC filter 
20 address table and connection table after receiving a message from the new wireless hub, and the registration reply is 
forwarded to the end system. 

[0204] The registration server sends a release message to the old wireless hub. When the old wireless hub receives 
the release message, it updates its connection table and the MAC filter address table and connection table of the old AP 
[0205] As depicted in FIG. 35, the macro mobility handoff case handles movement between wireless hubs that in- 
25 volves a change of the serving IWF in the foreign network, but it does not involve a change in the registration server 
When an advertisement is received from a new wireless hub (through a new AP), the end system sends a message 
to request a network layer registration to the registration server. The registration request is relayed from the new AP 
to the new wireless hub to the registration server. 

[0206] The registration server recognizes that it is a foreign registration server when the end system does not belong 

30 to the present registration server' network. This foreign registration server determines the identity of the home regis- 
tration server by using a request, preferably a Radius Access request (RA request), to the foreign directory server (like 
a big yellow pages) and then assigns an appropriate IWF to be the serving IWF, and it forwards a registration request 
to the home registration server, preferably through a Radius Access request (RA request), informing the home regis- 
tration server of the newly selected IWF. 

35 [0207] The home registration server authenticates the registration request by using a request, preferably a Radius 
Access request (RA request), to the home directory server. Upon authenticating the request and determining that the 
existing home IWF can still be used, the home registration server instructs the home IWF to build a new l-XTunnel to 
the newly assigned serving IWF and to tear down the existing l-XTunnel to the old serving IWF Upon receiving a 
positive build l-XTunnel reply and a positive tear l-XTunnel reply from the home IWF, the home registration server 

40 sends a registration reply to the foreign registration server. 

[0208] The foreign registration server then instructs the newly assigned IWF to build an XTunnel to the new wireless 
hub. Upon receiving a positive build XTunnel reply, the foreign registration server instructs the old IWF to tear down 
the XTunnel to the old wireless hub. Upon receiving a positive build XTunnel reply and a positive tear XTunnel reply, 
the foreign registration server sends a registration reply to end system. 

45 [0209] As the registration reply reaches the new wireless hub, the connection table at the new wireless hub is updated 
to reflect the connection to the new AP. The new AP updates its MAC filter address table and connection table after 
receiving a message from the new wireless hub, and the registration reply is forwarded to the end system. 
[021 0] The registration server sends a release message to the old wireless hub. When the old wireless hub receives 
the release message, it updates its connection table and the MAC filter address table, and the old AP updates its MAC 

so filter address table and connection table after receiving a message from the old wireless hub. 

[0211] The global mobility handoff case handles movement between wireless hubs that involves a change of regis- 
tration servers. FIG. 36 depicts a global mobility handoff where the home IWF does not change, and FIG. 37 depicts 
a global mobility handoff where the home IWF changes. When an advertisement is received from a new wireless hub 
(through a new AP) in a new foreign network, the end system sends a message to request a network layer registration 

55 to the new foreign registration server. The registration request is relayed from the new AP to the new wireless hub to 
the new foreign registration server. 

[0212] The registration server recognizes that it is a new foreign registration server when the end system does not 
belong to the present registration server's network. This foreign registration server determines the identity of the home 
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registration server by using a request, preferably a Radius Access request (RA request), to the foreign directory server 
(like a big yellow pages) and then assigns an appropriate IWF to be the serving IWF, and it forwards the registration 
request to the home registration server, preferably through a Radius Access request (RA request), informing the home 
registration server of the newly selected IWF. 

s [0213] The home registration server authenticates the registration request by using a request, preferably a Radius 
Access request (RA request), to the home directory server. Upon authenticating the request and determining that the 
existing home IWF can still be used (FIG. 36), the home registration server instructs the home IWF to build a new I- 
XTunnel to the serving IWF newly assigned by the new foreign registration server. The home registration server also 
sends a de-registration message to the old foreign registration server and instructs the home IWF to tear down the 

10 existing l-XTunnel to the existing serving IWF of the old foreign network. Upon receiving a positive build l-XTunnel 
reply and a positive tear l-XTunnel reply from the home IWF, the home registration server sends a registration reply to 
the new foreign registration server. 

[0214] The new foreign registration server then instructs the newly assigned IWF to build an XTunnel to the new 

wireless hub. Upon receiving a positive build XTunnel reply, the foreign registration server sends a registration reply 
1$ to end system. As the registration reply reaches the new wireless hub, the connection table at the new wireless hub 

is updated to reflect the connection to the new AP The new AP updates its MAC filter address table and connection 

table after receiving a message from the new wireless hub, and the registration reply is forwarded to the end system. 

[0215] The old foreign registration server instructs the old IWF to tear down the XTunnel to the old wireless hub. 

Upon receiving a positive tear XTunnel reply or contemporaneously with the tear down XTunnel request, the old foreign 
20 registration server sends a release message to the old wireless hub. When the old wireless hub receives the release 

message, it updates its connection table and the MAC filter address table, and the old AP updates its MAC filter address 

table and connection table after receiving a message from the old wireless hub. 

[0216] Alternatively, after the home registration server authenticates the registration request from the new foreign 
registration server and determines that the existing home IWF cannot be used (FIG. 37), the home registration server 
25 chooses a new home IWF and instructs the new home IWF to build a new level 2 tunnel protocol tunnel (L2TP tunnel) 
to the present PPP server (e.g., the PPP server in a connected ISP intranet). Then, the home registration server 
instructs the old home IWF to transfer its L2TP tunnel traffic to the new home IWF. 

[0217] Then the home registration server instructs the new home IWF to build a new l-XTunnel to the serving IWF 
newly assigned by the new foreign registration server. The home registration server also sends a de-registration mes- 

30 sage to the old foreign registration server and instructs the home IWF to tear down the existing l-XTunnel to the existing 
serving IWF of the old foreign network. Upon receiving a positive build l-XTunnel reply and a positive tear l-XTunnel 
reply from the home IWF, the home registration server sends a registration reply to the new foreign registration server. 
[0218] The new foreign registration server then instructs the newly assigned IWF to build an XTunnel to the new 
wireless hub. Upon receiving a positive build XTunnel reply, the foreign registration server sends a registration reply 

35 to end system. As the registration reply reaches the new wireless hub, the connection table at the new wireless hub 
is updated to reflect the connection to the new AP The new AP updates its MAC filter address table and connection 
table after receiving a message from the new wireless hub, and the registration reply is forwarded to the end system. 
[0219] The old foreign registration server instructs the old IWF to tear down the XTunnel to the old wireless hub. 
Upon receiving a positive tear XTunnel reply or contemporaneously with the tear down XTunnel request, the old foreign 

40 registration server sends a release message to the old wireless hub. When the old wireless hub receives the release 
message, it updates its connection table and the MAC filter address table, and the old AP updates its MAC filter address 
table and connection table after receiving a message from the old wireless hub. 

[0220] End systems constructed according to the present system interoperate with networks constructed according 
to the proposed IETF Mobile-IP standards, and end systems constructed according to the proposed IETF Mobile-IP 
4S standards interoperate with networks constructed according to the present invention. 

[0221] Differences between the present system and the IETF Mobile-IP (RFC2002, a standards document) include: 

(i) The present systemists a hierarchical concept for mobility management rather than a flat structure as in the 
proposed IETF Mobile-IP standard. Small mobility within a small area does not result in a network level registration. 
50 Micro mobility involves setting up of a new Xtunnel and tearing down of an existing Xtunnel. Global mobility, at the 

minimum, involves setting up of a new l-XTunnel and tearing down of an existing l-Xtunnel apart from the setting 
up/tearing down of XTunnel. Global mobility sometimes also involves setting up a new L2TP Tunnel and transferring 
of L2TP state from the existing L2TP Tunnel to the new L2TP Tunnel. 

55 (ii) In the present invention, a user name plus a realm is used to identify a remote dial-up user rather than a fixed 

home address as in the case of the proposed IETF Mobile-IP standard. 

(iii) In the present invention, registration and routing functions are carried out by separate entities. The two functions 
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are carried out by the home agent in the proposed IETF Mobile IP standard, and both functions are carried out by 
the foreign agent in the proposed IEFT Mobile IP standard. In contrast, in an embodiment of the present invention, 
registration is carried out in the registration server and routing functions are carried out by both the home and 
foreign IWF and the wireless hub (also referred to as the access hub). 

5 

(iv) The present system utilizes three tunnels per PPP session. The XTunnel is more of a link-layer tunnel between 
the wireless hub and the serving iWF. The l-XTunnel between the serving IWF and the home IWF is more like the 
tunnel between home and foreign agents in the proposed IETF Mobile-IP standard. But it also has additional 
capabilities beyond the tunnels proposed by the Mobile-IP standard. The L2TP tunnel is used only when home 

10 IWF is not a PPP server. The number of these tunnels may be reduced by combining some functions in the same 

nodes as described earlier. 

(v) In the present invention, wireless registration occurs before PPP session starts while in the proposed IETF 
Mobile-IP standard, Mobile-IP registration occurs after PPP session enters into the open state. 

15 

(vi) In the present invention, the network entity that advertises the agent advertisement (i.e., the wireless hub) is 
not on a direct link to the end systems whereas for the proposed IETF Mobile-IP standard, the agent advertisement 
must have a TTL of 1 which means that the end systems have a direct link with the foreign agent. In addition, the 
agent advertisement in the present systems not an extension to the I CMP router advertisements as in the proposed 

20 IETF Mobile-IP standard. 

[0222] End systems in the present invention, should support agent solicitation. When an end system in the present 
system visits a network which is supporting the proposed IETF Mobile-IP standard, it waits until it hears an agent 
advertisement. If it does not receive an agent advertisement within a reasonable time frame, it broadcasts an agent 
25 solicitation. 

[0223] In the present invention, network operators may negotiate with other networks that support the proposed IETF 
Mobile-IP standard such that home addresses can be assigned to the end systems of the present system that wish to 
use other networks. When the end system of the present system receives the agent advertisement, it can determine 
that the network it is visiting is not an a network according to the present system and hence uses the assigned home 
30 address to register. 

[0224] For networks supporting the proposed IETF Mobile-IP standard, the PPP session starts before Mobile-IP 
registration, and the PPP server is assumed to be collocated with the foreign agent in such networks. In one embod- 
iment, an SNAP header is used to encapsulate PPP frames in the MAC frames of the present system(in a manner 
similar to Ethernet format), and the foreign agent interprets this format as a proprietary PPP format over Ethernet 

35 encapsulation. Thus, the end system of the present system and its PPP peer can enter into an open state before the 
foreign agent starts transmitting an agent advertisement, and the end system of the present system can register. 
[0225] To allow end systems supporting the proposed IETF Mobile-IP standard to work in networks of the type of 
the present invention, such mobiles are at least capable of performing similar MAC layer registrations. By making the 
agent advertisement message format similar to the proposed Mobile-IP standard agent advertisement message format, 

40 a visiting end system can interpret the agent advertisement and register with a wireless hub. In the present invention, 
registration request and reply messages are similar to the proposed IETF Mobile-IP standard registration request and 
reply messages (without any unnecessary extensions) so that the rest of the mobility management features of the 
present system are transparent to the visiting end systems. 

[0226] Since end systems supporting the proposed IETF Mobile-IP standard expect a PPP session to start before 
45 Mobile-IP registration, an optional feature in wireless hubs of the present system starts to interpret PPP LCP, NCP 
packets after MAC- layer registrations. 

[0227] To avoid losing traffic during handoffs, the mobility management of the present systemists the make before 
break concept. For local mobility, a make before break connection is achieved by turning the MAC- layer registration 
message relayed by the new AP to the wireless hub into a broadcast message. That way, the old AP can hear about 

so the new registration and forward packets destined for the end system that have not been transmitted to the new AP. 
[0228] For micro mobility, information about the new wireless hub is included in the Tear XTunnel message exchanged 
between the serving IWF and the old WH. That way, the old wireless hub can forward buffered packets to the new 
wireless hub upon hearing a TearXTunnel message from the serving IWF. Alternatively, the RLP layer at the IWF knows 
the sequence number that has been acknowledged by the old wireless hub so far. 

55 [0229] At the same time, the IWF knows the current send sequence number of the latest packet sent to the old 
wireless hub. Therefore, the IWF can forward those packets that are ordered in between these two numbers to the 
new wireless hub before sending newer packets to the new wireless hub. The RLP layer is assumed to be able to filter 
duplicate packet. The second approach is probably preferable to the first approach for the old wireless hub may not 
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be able to communicate with one another directly. 

[0230] For macro mobility, the old serving I WF can forward packets to the new serving IWF, in addition to the packet 
forwarding done from the old wireless hub to the new wireless. All we need to do is to forward the new serving IWF 
identity to the new serving IWF in the tear down l-XTunnel message. Another way to achieve the same result is to let 
5 the home IWF forward the missing packets to the new serving IWF rather than asking the old serving IWF to do the 
job since the home IWF knows the l-XTunnel sequence number last acknowledged by the old serving IWF and the 
current l-XTunnel sequence number sent by the home IWF 

[0231] The method of estimating how much buffer should be allocated per mobile per AP per wireless hub per IWF 
such that the traffic loss between handoffs can be minimized is to let the end system for the AP for the wireless hub 
10 for the IWF estimate the packet arrival rate and the handoff time. This information is passed to the old AP of the wireless 
hub of the IWF to determine how much traffic should be transferred to the new AP of the wireless hub of the IWF, 
respectively, upon handoffs. 

[0232] To achieve route optimization in the present invention, the end system chooses the PPP server closest to 
the serving IWF Without route optimization, excessive transport delays and physical line usage may be experienced. 

75 [0233] For example, an end system subscribed to a home network in New York City may roam to Hong Kong. To 
establish a link to a Hong Kong ISP, the end system would have a serving IWF established in a wireless hub in Hong 
Kong and a home IWF established in the home network in New York City. A message would then be routed from the 
end system (roamed to Hong Kong) through the serving IWF (in Hong Kong) and through the home IWF (in New York 
City) and back to the Hong Kong ISR 

20 [0234] A preferred approach is to connect from the serving IWF (in Hong Kong) directly to the Hong Kong ISP. The 
serving IWF acts like the home IWF. In this embodiment, roaming agreements exist between the home and foreign 
wireless providers. In addition, the various accounting/billing systems communicate with one another automatically 
such that billing information is shared. Accounting and billing information exchange may be implemented using stand- 
ards such as the standard proposed by the ROAMOPS working group of the IETF 

25 [0235] However, the serving IWF must still discover the closest PPP server (e.g., the Hong Kong ISP). In the present 
embodiment, the foreign registration server learns of the end system's desire to connect to a PPP server (e.g., a Hong 
Kong ISP) when it receives a registration request from the end system. When the foreign registration server determines 
that the serving IWF is closer to the desired PPP server (e.g., the Hong Kong ISP) than the home IWF is, the foreign 
registration server instructs the serving IWF to establish an L2TP tunnel to its nearest PPP server (in contrast to the 

30 ppp server closest to the home registration server and home IWF). Then, the foreign registration server informs the 
home registration server that the end system is being served by the serving IWF and the foreign PPP. 
[0236] In an alternative embodiment, the foreign registration server determines that the serving IWF is closer to the 
desired PPP server (e.g., the Hong Kong ISP) than the home IWF is, when it receives a registration request from the 
end system. The foreign registration server relays the registration request message to the home registration server 

35 with an attached message indicating the serving IWF information and a notification that route optimization is preferred. 
At the same time, the foreign registration server instructs the serving IWF to establish an L2TP tunnel to the PPP 
server. Upon approving the registration request, the home registration server instructs the home IWF to transfer the 
L2TP state to the foreign IWF. 

[0237] Having described preferred embodiments of a novel network architecture with wireless end users able to 
40 roam (which are intended to be illustrative and not limiting), it is noted that modifications and variations can be made 
by persons skilled in the art in light of the above teachings. For example, connection links described herein may make 
reference to known connection protocols (e.g., IP, TCP/IP, L2TP, IEEE 802.3, etc.); however, the system contemplates 
other connection protocols in the connections links that provide the same or similar data delivery capabilities. Acting 
agents in the above described embodiments may be in the form of software controlled processors or may be other 
45 form of controls (e.g., programmable logic arrays, etc.). Acting agents may be grouped as described above or grouped 
otherwise in keeping with the connection teachings described herein and subject to security and authentication teach- 
ings as described herein. Furthermore, a single access point, access hub (i.e., wireless hub) or inter-working function 
unit (IWF unit) may provide multi-channel capability. Thus, a single access point or access hub or IWF unit may act on 
traffic from multiple end systems, and what is described herein as separate access points, access hubs or IWF units 
so contemplates equivalence with a single multichannel access point, access hub or IWF unit. It is therefore to be under- 
stood that changes may be made in the particular embodiments of the system disclosed which are within the scope 
and spirit of the systems defined by the appended claims. 

[0238] Having thus described the system with the details and particularity required by the patent laws, what is claimed 
and desired protected by Letters Patent is set forth in the appended claims. 

55 
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Claims 

1. A wireless data network comprising: 

5 a home network that includes a home mobile switching center and a wireless end system, the home mobile 

switching center including a home registration server and a home inter-working function, the wireless end 
system including an end registration agent, the end registration agent being coupled to the home registration 
server; and 

10 a PPP server, a message being coupleable from the end system through the home inter-working function to 

the PPP server. 

2. The network of claim 1 , further comprising: 

15 a foreign network that includes a foreign mobile switching center and a base station, the foreign mobile switch- 

ing center including a serving registration server, the base station including an access hub, the access hub 
including a proxy registration agent; and 

a second end system subscribed to the home network and operating within the foreign network, the end system 
20 including an end registration agent, the end registration agent being coupled to the proxy registration agent, 

the proxy registration agent being coupled to the serving registration server, the serving registration server 
being coupled to the home registration server. 

3. The network of claim 2, wherein the home registration server includes a module to authenticate that the foreign 
25 network is authorized to host the second end system. 

4. The network of claim 2, wherein the home registration server includes a module to authenticate that the second 
end system is authorized to receive services of the home network. 

30 5. The network of claim 2, wherein the serving registration server includes a module to authenticate that the second 
end system is a subscriber of the home network. 

6. The network of claim 2, wherein: 

3S the home registration server includes a module to authenticate that the foreign network is authorized to host 

the end system; 

the home registration server includes a module to authenticate that the end system is authorized to receive 
services of the home network; and 

40 

the serving registration server includes a module to authenticate that the end system is a subscriber of the 
home network. 

7. The network of claim 6, wherein: 

45 

the home network further includes a home billing processor; 

the foreign network further includes a foreign accounting server and a foreign billing processor; 

50 the first serving inter-working function includes a foreign accounting collection module to collect accounting 

data on message traffic transported through the first serving inter-working function, the foreign accounting 
collection module including a sub-module to periodically send accounting reports to the foreign accounting 
server, the foreign accounting server including a module to send accounting reports to the foreign billing proc- 
essor, the foreign billing processor including a module to send accounting reports to the home billing processor, 

55 the home billing processor including a module to prepare customer bills based on the accounting reports from 

the foreign billing processor. 

8. The network of claim 1 , further comprising: 
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a foreign network that includes a foreign mobile switching center and a base station, the base station including 
an access hub with a serving inter-working function; and 

a roaming end system subscribed to the home network and operating within the foreign network, a message 
being transportable between the roaming end system and the home inter-working function through the serving 
inter-working function using protocol that ensures in sequence delivery of data packets. 

A data network to communicate with a first PPP protocol module, the data network comprising: 

a mobile end system operable in first and second modes, the first mode providing internet access services, 
the second mode providing remote intranet access services, the mobile end system including a second PPP 
protocol module, PPP data frames being transportable between the first and second PPP protocol modules; 
and 

a home inter-working function, the home inter-working function incorporating the first PPP protocol module 
when the mobile end system operates in the first mode, the home inter-working function being coupled to the 
first PPP protocol module operating externally when the mobile end system operates in the second mode. 
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FIG. 5 
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FIG. 6 
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FIG. 7 
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FIG. 10 
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FIG. 14 
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